TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
> The latest System Scanner Service Release is now available in the System > Scanner section of the ISS Download Center: > <http://www.iss.net/download/>. > > System Scanner Service Release 3.05 includes the following updates > > Updates to the System Scanner Console. > * System Scanner 4.2 on-line help > * Updated Console database to include updated and amended > checks and policies. > * Updated Console software to include bug corrections. > * Updated Policy Navigator files. Policy Navigator files now > contain CVE references and hyperlinks to further information where it is > available. Agents with updated Policy Navigator files include: > - Compaq Tru64 UNIX > - HP-UX 10.20 > - HP-UX 11 > - IBM AIX 4.3 > - Microsoft Windows 2000 > - Microsoft Windows NT 4.0 > - Sun Solaris 2.6 > - Sun Solaris 7 > - Sun Solaris 8 > * New CLI script - InstallUpdate - Apply an XPU to an agent > via the Console CLI. > > Updates are included for the following agents: > > Service Release 1.19 (Version 4.0 agents) > * HP-UX 10.20 > * Sun Solaris 7 (SPARC) > * Sun Solaris 2.6 (SPARC) > > Updated Checks > * file-all-17 File has an unusual name > * file-hist-01 /var/adm/sulog contains 'su to root' > entries > * file-sgid-binary Binary file has setgid bit set > * file-sgid-script Script file has setgid bit set > * file-suid-binary Binary file has setuid bit set > * file-suid-script Script file has setuid bit set > Updated Policies > * allfiles > * Initial-3 > * Initial-6 > * Maintenance-4 > * Maintenance-6 > > For specific agents please refer to the Update #1.19 readme file. > > NOTE for Solaris 2.6: An ISS goal is to reduce the cost of > deploying of System Scanner agents. The Version 4.0 agent for Solaris 2.6 > now has 18 X-Press Updates to be applied for new installations. The > serial application of each XPU to the newly installed agent can take > several minutes, ISS has therefore consolidated all of the content of the > XPU's 1 - 18 into XPU 19 to improve performance for customers. Testing > has shown that the installation time is significantly reduced. In order > to realise this performance gain Updates 1 to 18 will be reduced to 'empty > shells'. The consequence of this is that the XPU will still appear in the > Console but will now be empty. If any users have any requirements for > applying a specific update or updates they should back-up the X-Press > Update files before installing this update. The files are to be found at > <install directory>/ISS/System Scanner Console/Agent > Updates/4.0/Update10/Solaris2_6. > > Service Release 2.10 (Version 4.1 Agents) > * Solaris 8 > > Updated Checks > * file-all-17 File has an unusual name > * file-hist-01 /var/adm/sulog contains 'su to root' > entries > * file-sgid-binary Binary file has setgid bit set > * file-sgid-script Script file has setgid bit set > * file-suid-binary Binary file has setuid bit set > * file-suid-script Script file has setuid bit set > Updated Policies > * allfiles > * Initial-3 > * Initial-6 > * Maintenance-4 > * Maintenance-6 > Please also refer to the Update #2.10 readme file. > > Service Release 3.05 (Version 4.2 Agents) > * Compaq Tru64 UNIX > * HP-UX 11 > * IBM AIX 4.3 > > Updated Checks > * file-all-17 File has an unusual name > * file-hist-01 /var/adm/sulog contains 'su to root' > entries > * file-sgid-binary Binary file has setgid bit set > * file-sgid-script Script file has setgid bit set > * file-suid-binary Binary file has setuid bit set > * file-suid-script Script file has setuid bit set > Update Policies > * allfiles > * Initial-3 > * Initial-6 > * Maintenance-4 > * Maintenance-6 > > * Microsoft Windows NT 4.0 (Server and Workstation) > > New Checks > * MS01-048 Windows NT RPC endpoint mapper malformed > request denial of service > * MS02-001 Windows NT and Windows 2000 SIDs could allow > an attacker to gain elevated privileges in another domain > * MS02-006 Multiple vendor SNMP request handling issues > discovered using the PROTOS c06-SNMPv1 test suite > * MS02-007 Microsoft SQL Server OLE DB provider name > "ad hoc" connection buffer overflow > * MS02-013 Sun Java Runtime Environment and Microsoft > Virtual Machine (VM) Java applet could be used to redirect browser traffic > when using a proxy > * MS02-014 Microsoft Windows Shell buffer overflow can > occur when an application has been improperly removed > * MS02-017 Microsoft Windows NT, 2000, and XP MUP > buffer overflow > Updated Checks > * MS01-044d IIS specially-crafted SSI directives buffer > overflow > * reg-nt-vers-01 Latest Service Pack not installed > * reg-screen-03 Screen saver timeout period too long > Updated Policies > * iis > * userDefaults > * versionChecks > * Initial-1 > * Initial-3 > * Maintenance-1 > * Maintenance-4 > > * Microsoft Windows 2000 (Server and Professional) > > New Checks > * MS02-001 Windows NT and Windows 2000 SIDs could allow > an attacker to gain elevated privileges in another domain > * MS02-004 Microsoft Windows 2000 and Interix 2.2 > telnet protocol option buffer overflow > * MS02-006 Multiple vendor SNMP request handling issues > discovered using the PROTOS c06-SNMPv1 test suite > * MS02-007 Microsoft SQL Server OLE DB provider name > "ad hoc" connection buffer overflow > * MS02-010 Microsoft Commerce Server 2000 AuthFilter > ISAPI filter buffer overflow > * MS02-013 Sun Java Runtime Environment and Microsoft > Virtual Machine (VM) Java applet could be used to redirect browser traffic > when using a proxy > * MS02-014 Microsoft Windows Shell buffer overflow can > occur when an application has been improperly removed > * MS02-016 Windows 2000 could allow an attacker to > block the application of Group Policy settings > * MS02-017 Microsoft Windows NT, 2000, and XP MUP > buffer overflow > * policy-withdrawn System Scanner policy has no security > content > Updated Checks > * MS00-069 Windows 2000 Simplified Chinese IME State > Recognition > * MS01-044d IIS specially-crafted SSI directives buffer > overflow > * reg-nt-vers-01 Latest Service Pack not installed > * reg-screen-03 Screen saver timeout period too long > Updated Policies > * iss > * user-checks > * userDefaults > * versionChecks > * DPSChecks > * Initial-1 > * Initial-2 > * Initial-3 > * Maintenance-1 > * Maintenance-2 > * Maintenance-4 > For specific agents please refer to the Update #3.05 readme file > > For more information on the release of System Scanner, please contact the > following: > * For additional product information: > - X-Press Update details are available at: > <http://www.iss.net/db_data/xpu/SS.php> > - Nick Connor, Host Protection Product Manager, > [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>, +44 118 959 3813 > - Jamie Lau, X-Press Updates Product Manager, [EMAIL PROTECTED] > <mailto:[EMAIL PROTECTED]>, 404-236-2948 > - John Cloonan, Technical Product Manager, [EMAIL PROTECTED] > 513-936-8364 > > * For sales information: > - [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > - 888-901-7477 (North America) > > * For education, consulting and support information, including ISS > SecureU training on System Scanner: > - John Franklin, CSG Business Development Manager, > [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>, 949-916-8037 > - Joel Williams, CSG Business Development Manager, > [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>, 404-236-3971 > - ISS SecureU training - > http://education.iss.net/course_descriptions/ > > >
