SmartDefense Services Bulletin

Email lists > Check Point Software Technologies

List Info

Thread: SmartDefense Services Bulletin - April 2006

SmartDefense Services Bulletin - April 2006

2006-04-07 22:55:45

SmartDefense Services Bulletin

April 2006

Greetings! This bulletin features Check Point SmartDefense Services highlights for the month of March. Please feel free to CheckPoint.com">email us if you have any comments or questions.

To sign-up to the mailing list, send an email to amadeus.us.checkpoint.com?body=SUBSCRIBE SMARTDEFENSE-NEWS">mailto:listservamadeus.us.checkpoint.com?body=SUBSCRIBE SMARTDEFENSE-NEWS with the text "SUBSCRIBE SMARTDEFENSE-NEWS" in the email body. If you'd like to unsubscribe from this bulletin, send an email to amadeus.us.checkpoint.com?body=SIGNOFF SMARTDEFENSE-NEWS">mailto:listservamadeus.us.checkpoint.com?body=SIGNOFF SMARTDEFENSE-NEWS with the text "SIGNOFF SMARTDEFENSE-NEWS" in the email body.

In This Bulletin

About SmartDefense Services
March Advisories
March Security Best Practices
March Defense Updates

About SmartDefense Services

Check Point SmartDefense Services maintain the most current preemptive security for your Check Point security infrastructure. To help your defenses stay continuously ahead of today̵7;s constantly evolving threat landscape, SmartDefense Services provide:

Preemptive, ongoing, and real-time updates to defenses and security policies
Ongoing new protocol and application defenses against emerging threats and attacks
Step-by-step instructions on how to activate and configure defenses against emerging threats and vulnerabilities – usually before exploits are created by hackers
Anti-virus updates and alerts for Check Point VPN-1 Express CI
Anti-spyware updates for Check Point Integrity Anti-Spyware
Malicious applications database for automating network access and malware termination policies (Program Advisor Service for Integrity)

March Advisories (Sorted by Severity, then Date)


CPAI-2006-024
	Date:	15-Mar-2006
	Severity:	Critical
	Description:	Multiple Microsoft Office Vulnerabilities (MS06-012)
	Sources:	Microsoft Security Bulletin MS06-012
	Vulnerable Systems:	For a complete list of the affected systems, visit Microsoft Security Bulletin MS06-012 at http://www.microsoft.com/technet/security/Bulletin/MS06-012.mspx.

CPAI-2006-020
	Date:	01-Mar-2006
	Severity:	Critical
	Description:	Update Protection Against WMF/EMF Image Parsing Vulnerability (MS06-004)
	Sources:	Microsoft Security Bulletin MS06-004
	Vulnerable Systems:	Internet Explorer 5.01 SP4 on Microsoft Windows 2000 SP4

CPAI-2006-033
	Date:	27-Mar-2006
	Severity:	High
	Description:	Protection Against Microsoft Internet Explorer createTextRange () Vulnerability
	Sources:	Microsoft Security Advisory (917077)
	Vulnerable Systems:	Microsoft Internet Explorer 5.1 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.x

CPAI-2006-032
	Date:	26-Mar-2006
	Severity:	High
	Description:	FreeBSD NFS Mount Request DoS Protection
	Sources:	FreeBSD Security Advisory FreeBSD-SA-06:10.nfs
	Vulnerable Systems:	All FreeBSD releases.

CPAI-2006-030
	Date:	26-Mar-2006
	Severity:	High
	Description:	Protection Against Oracle Reports Server Multiple Vulnerabilities
	Sources:	Oracle Critical Patch Update - January 2006
	Vulnerable Systems:

CPAI-2006-029
	Date:	26-Mar-2006
	Severity:	High
	Description:	Protection Against SHOUTcast Format String Vulnerability
	Sources:	FrSIRT
	Vulnerable Systems:	SHOUTcast version 1.9.4 on Linux and possibly earlier versions

CPAI-2006-028
	Date:	26-Mar-2006
	Severity:	High
	Description:	Protection Against Cisco IOS HTTP Server Code Injection Vulnerability
	Sources:	Cisco Security Advisory ID: 68322
	Vulnerable Systems:	Cisco IOS HTTP Server version 11.0 through 12.4 (with the HTTP server enabled)

CPAI-2006-018
	Date:	01-Mar-2006
	Severity:	High
	Description:	Update Protection Against Microsoft Windows Web Client Service Vulnerability (MS06-008)
	Sources:	Microsoft Security Bulletin MS06-008
	Vulnerable Systems:	Microsoft Windows XP SP1 and SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows Server 2003 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 for Itanium-based Systems Microsoft Windows Server 2003 with SP1 for Itanium-based Systems Microsoft Windows Server 2003 x64 Edition

CPAI-2006-031
	Date:	26-Mar-2006
	Severity:	Medium
	Description:	Protection Against Directory Traversal Vulnerability in IBM Tivoli Access Manager
	Sources:	SecurityTracker ID: 1015582
	Vulnerable Systems:	Tivoli Access Manager versions 5.1.0.10, 6.0.0. Other versions may also be affected.

CPAI-2006-027
	Date:	26-Mar-2006
	Severity:	Medium
	Description:	Tftpd32 Request Error Message Format String Protection
	Sources:	FrSIRT/ADV-2006-0263
	Vulnerable Systems:	Tftpd32 version 2.81 and earlier versions

CPAI-2006-026
	Date:	26-Mar-2006
	Severity:	Medium
	Description:	ezDatabase Remote File Inclusion Protection
	Sources:	SecurityFocus
	Vulnerable Systems:	ezDatabase 2.0 and earlier versions

CPAI-2006-023
	Date:	09-Mar-2006
	Severity:	Medium
	Description:	Integrity Clientless Security (ICS) Update 3.7.68.0
	Sources:	SmartDefense Research Center
	Vulnerable Systems:	Microsoft Windows clients

CPAI-2006-022
	Date:	09-Mar-2006
	Severity:	Medium
	Description:	Integrity Clientless Security (ICS) Update 3.7.67.0
	Sources:	SmartDefense Research Center
	Vulnerable Systems:	Microsoft Windows clients

CPAI-2006-021
	Date:	01-Mar-2006
	Severity:	Medium
	Description:	Integrity Clientless Security (ICS) Update 3.7.61.0
	Sources:	SmartDefense Research Center
	Vulnerable Systems:	Microsoft Windows clients

CPAI-2006-025
	Date:	26-Mar-2006
	Severity:	Low
	Description:	Trojan/Spy. Goldun.de.1 Protection
	Sources:	Check Point Virus Information Center
	Vulnerable Systems:	Windows 95 Windows 98 Windows 98 SE Windows NT Windows ME Windows 2000 Windows XP Windows 2003

March Security Best Practices (Sorted by Severity, then Date)


CPSA-2006-02
	Date:	26-Mar-2006
	Severity:	High
	Description:	How To Protect Against Instant Messaging Vulnerabilities: Blocking Google Talk
	Sources:	SmartDefense Research Center
	Vulnerable Systems:	Microsoft Windows operating systems

March Defense Updates


CPAI-2006-033
	Date:	27-Mar-2006
	Update Number:	541060327 (VPN-1 NG R54/R55) 550060327 (VPN-1 NG R55W) 591060327 (VPN-1 NGX R60) 602060327 (VPN-1 NGX R61) 547060327 (InterSpect 1.x and 2.0) 592060327 (InterSpect NGX)
	Description:	Microsoft Internet Explorer createTextRange Protection


CPSA-2006-02
	Date:	26-Mar-2006
	Update Number:	592060326 (InterSpect NGX)
	Description:	Google Talk via Gmail Web Interface Protection


CPAI-2006-032
	Date:	26-Mar-2006
	Update Number:	541060326 (VPN-1 NG R54/R55) 550060326 (VPN-1 NG R55W) 591060326 (VPN-1 NGX R60) 602060326 (VPN-1 NGX R61) 547060326 (InterSpect 1.x and 2.0) 592060326 (InterSpect NGX)
	Description:	FreeBSD NFS Malformed Mount Request Protection


CPAI-2006-31
	Date:	26-Mar-2006
	Update Number:	541060326 (VPN-1 NG R54/R55) 550060326 (VPN-1 NG R55W) 591060326 (VPN-1 NGX R60) 602060326 (VPN-1 NGX R61) 547060326 (InterSpect 1.x and 2.0) 592060326 (InterSpect NGX)
	Description:	IBM Tivoli Access Manager Directory Traversal Protection


CPAI-2006-030
	Date:	26-Mar-2006
	Update Number:	541060326 (VPN-1 NG R54/R55) 550060326 (VPN-1 NG R55W) 591060326 (VPN-1 NGX R60) 547060326 (InterSpect 1.x and 2.0) 592060326 (InterSpect NGX)
	Description:	Oracle Report File Overwrite/Oracle Report Directory Traversal Protection


CPAI-2006-029
	Date:	26-Mar-2006
	Update Number:	541060326 (VPN-1 NG R54/R55) 591060326 (VPN-1 NGX R60) 602060326 (VPN-1 NGX R61) 547060326 (InterSpect 1.x and 2.0) 592060326 (InterSpect NGX)
	Description:	SHOUTcast Filename Request Format String Protection


CPAI-2006-028
	Date:	26-Mar-2006
	Update Number:	541060326 (VPN-1 NG R54/R55) 550060326 (VPN-1 NG R55W) 591060326 (VPN-1 NGX R60) 602060326 (VPN-1 NGX R61) 547060326 (InterSpect 1.x and 2.0) 592060326 (InterSpect NGX)
	Description:	Cisco IOS CDP Status Page Code Injection Protection


CPAI-2006-027
	Date:	26-Mar-2006
	Update Number:	592060326 (InterSpect NGX)
	Description:	TFTPD32 Request Error Message Format String Protection


CPAI-2006-026
	Date:	26-Mar-2006
	Update Number:	541060326 (VPN-1 NG R54/R55) 550060326 (VPN-1 NG R55W) 591060326 (VPN-1 NGX R60) 602060326 (VPN-1 NGX R61) 547060326 (InterSpect 1.x and 2.0) 592060326 (InterSpect NGX)
	Description:	ezDatabase Remote File Inclusion Protection


CPAI-2006-025
	Date:	26-Mar-2006
	Update Number:	541060326 (VPN-1 NG R54/R55) 550060326 (VPN-1 NG R55W) 591060326 (VPN-1 NGX R60) 602060326 (VPN-1 NGX R61) 547060326 (InterSpect 1.x and 2.0) 592060326 (InterSpect NGX)
	Description:	Trojan Spy Goldun.de Protection


CPAI-2006-016
	Date:	26-Mar-2006
	Update Number:	541060326 (VPN-1 NG R54/R55) 550060326 (VPN-1 NG R55W) 591060326 (VPN-1 NGX R60) 602060326 (VPN-1 NGX R61) 547060326 (InterSpect 1.x and 2.0) 592060326 (InterSpect NGX)
	Description:	Microsoft Windows Media Player Enhanced Protection (MS06-005)


CPAI-2006-023
	Date:	09-Mar-2006
	Update Number:	690060308 (Connectra 2.0) 691060308 (Connectra NGX)
	Description:	Integrity Clientless Security (ICS) Update 3.7.68.0


CPAI-2006-022
	Date:	09-Mar-2006
	Update Number:	690060301 (Connectra 2.0) 691060301 (Connectra NGX)
	Description:	Integrity Clientless Security (ICS) Update 3.7.67.0


CPAI-2006-021
	Date:	01-Mar-2006
	Update Number:	690060220 (Connectra 2.0) 691060220 (Connectra NGX)
	Description:	Integrity Clientless Security (ICS) Update 3.7.61.0


CPAI-2006-020
	Date:	01-Mar-2006
	Update Number:	541060301 (VPN-1 NG R54/R55) 550060301 (VPN-1 NG R55W) 591060301 (VPN-1 NGX R60) 602060301 (VPN-1 NGX R61) 547060301 (InterSpect 1.x and 2.0) 592060301 (InterSpect NGX)
	Description:	Update Protection Against WMF/EMF Image Parsing Vulnerability (MS06-004)


CPAI-2006-018
	Date:	01-Mar-2006
	Update Number:	541060301 (VPN-1 NG R54/R55) 550060301 (VPN-1 NG R55W) 591060301 (VPN-1 NGX R60) 602060301 (VPN-1 NGX R61) 547060301 (InterSpect 1.x and 2.0) 592060301 (InterSpect NGX)
	Description:	Microsoft Windows Web Client Service Protection (MS06-008)

You received this email because our records indicate that you wish to be contacted about SmartDefense Updates, Advisories, product news, and security information. If you do not want to receive further mailings, unsubscribe by sending a message with "SIGNOFF SMARTDEFENSE-NEWS" command to http://webrequests.checkpoint.com/uploads/17416-348-sds_bulletin_mar.html# in the first line (not the subject).


	This message was sent by Check Point Software Technologies using Responsys Interact. Safely unsubscribe from Check Point Software Technologies e-mail at any time. View our permission marketing policy.

[1]

about | contact Other archives ( Real Estate discussion Medical topics )