TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
Internet Scanner� X-Press Update(tm) (XPU) 6.10 is now available from the ISS Download Center at http://www.iss.net/download/. Internet Scanner XPU 6.10 contains 24 new checks and fixes for 16 existing checks. XPU 6.10 focuses on Oracle Application Server and Windows XP. PROTECTION BENEFITS * Operating Environment Protection - Windows XP is a theme of this XPU, and XPU 6.10 includes ten checks to identify system configurations that could weaken your security posture. * Application Protection - XPU 6.10 includes five checks to address recent vulnerabilities in Oracle Application Server. In addition the XPU includes checks to address vulnerabilities in Microsoft Outlook and Internet Explorer, as well as discovery of FTP servers. * Peer-to-Peer Applications and Remote Control - XPU 6.10 includes a check to identify a recent high-risk vulnerability in MSN Messenger as well as a check to identify systems with remote administrator services running. NEW CHECKS The new checks in this XPU are listed below. Risk VulnID Check Name Category ==== ====== ========== ========= High 8457 OracleAppserverLocationBo Web Scan High 8449 OracleAppserverSoapComponents Web Scan Medium 8455 OracleAppserverApacheServices Web Scan Medium 8453 OracleAppserverConfigFileAccess Web Scan Medium 8452 OracleAppserverPlsqlWebInterface Web Scan High 9041* MsnChatcontrolResdllBo Instant Messaging High 8394 CdeDtspcdRunning Daemons Medium 8964 RemoteAdministratorRunning Daemons High 9090* IeMs02023Patch NT Critical Issues Medium 7941* IeCodebaseExecutePrograms NT Critical Issues Medium 8810* OutlookLevel1removeExist NT Critical Issues Medium 8888* WinxpClientSigningDisabled NT Critical Issues Medium 8917* WinxpCredentialStorageAllowed NT Critical Issues Medium 8887* WinxpDigitalEncryptionDisabled NT Critical Issues Medium 8885* WinxpDigitalSigningDisabled NT Critical Issues Medium 8886* WinxpSamAnonymousEnumeration NT Critical Issues Medium 8891* WinxpServerSigningDisabled NT Critical Issues Medium 8889* WinxpSigningClientAgrees NT Critical Issues Medium 8890* WinxpSigningServerAgrees NT Critical Issues Medium 8892* WinxpStrongSessionkeyDisabled NT Critical Issues Low 8918* WinxpRdaEnabled NT Critical Issues Low 8978* FtpBpftpInstalled FTP Low 8979 FtpNonstandardRunning FTP Low 8975* RaidenFtpdPresent FTP * Please note that these checks require administrative privileges on scanned hosts. IMPROVED CHECKS The following checks have been improved in XPU 6.10. AdminBlankPw (160) BackdoorY3kRat (4496) Fpnwclnt checksum (49) Fw1GettopoNoauth (5172) GuestNoPw HttpCgiImagemapBo (3351) IisIsapiIdqBo (6705) IisSamplesCodebrws (2383) NetsapeGetBo (2384) NfsCache (73) OutlookDateOverflow (4953) RAS (16) Registry (99) RloginSpoof (105) RshSpoof (113) TelnetdOptionTelrevBo (6875) VERSIONS/PLATFORMS XPU 6.10 is for use with Internet Scanner version 6.2.1. Internet Scanner 6.2.1 is available from the ISS Download Center at http://www.iss.net/download/ For more information on this release, please contact the following: * For additional product information: - Internet Scanner: http://www.iss.net/products_services/enterprise_protection/vulnerability_ass essment/ - X-Press Updates: http://www.iss.net/db_data/xpu/IS.php * For sales information: - [EMAIL PROTECTED] - 888-901-7477 (North America)
