December 2006 SmartDefense Services Bulletin

SmartDefense Services Bulletin

December 2006

Greetings! This bulletin features Check Point SmartDefense Services highlights for the month of . Please feel free to email us if you have any comments or questions.

To sign-up to the mailing list, send an email to listserv@amadeus.us.checkpoint.com with the text "SUBSCRIBE SMARTDEFENSE-NEWS" in the email body. If you'd like to unsubscribe from this bulletin, send an email to listserv@amadeus.us.checkpoint.com with the text "SIGNOFF SMARTDEFENSE-NEWS" in the email body.

In This Bulletin

About SmartDefense Services
Advisories
Defense Updates

About SmartDefense Services

Check Point SmartDefense Services maintain the most current preemptive security for your Check Point security infrastructure. To help your defenses stay continuously ahead of today’s constantly evolving threat landscape, SmartDefense Services provide:

Preemptive, ongoing, and real-time updates to defenses and security policies
Ongoing new protocol and application defenses against emerging threats and attacks
Step-by-step instructions on how to activate and configure defenses against emerging threats and vulnerabilities – usually before exploits are created by hackers
Anti-virus updates and alerts for Check Point VPN-1 UTM
Anti-spyware updates for Check Point Integrity Anti-Spyware
Malicious applications database for automating network access and malware termination policies (Program Advisor Service for Integrity)

Advisories (Sorted by Severity, then Date)


CPAI-2006-144
	Date:
	Severity:
	Description:	Update Protection against AOL Nullsoft Winamp Ultravox Heap Overflow Vulnerability
	Sources:	Secunia Advisory: SA22580
	Vulnerable Systems:	AOL Winamp versions 2.666 through 5.3

CPAI-2006-137
	Date:
	Severity:
	Description:	Update Protection against Novell eDirectory 'evtFilteredMonitorEventsRequest' Vulnerability
	Sources:	FrSIRT/ADV-2006-4142
	Vulnerable Systems:	Novell eDirectory version 8.8.1 and prior

CPAI-2006-134
	Date:
	Severity:
	Description:	Preemptive Protection against Microsoft XML Remote Code Execution Vulnerability (MS06-071)
	Sources:	Microsoft Security Bulletin MS06-071
	Vulnerable Systems:	Microsoft XML Core Services 4.0 for Windows 2000 SP4 Microsoft XML Core Services 4.0 for Microsoft Windows XP SP2 Microsoft XML Core Services 4.0 for Microsoft Windows Server 2003 Microsoft XML Core Services 4.0 for Microsoft Windows Server 2003 SP1

CPAI-2006-128
	Date:
	Severity:
	Description:	Update Protection against Vector Markup Language (VML) Vulnerability (MS06-055)
	Sources:	Microsoft Security Advisory (925568) Microsoft Security Bulletin MS06-055
	Vulnerable Systems:	Microsoft Internet Explorer 5.01 SP4 on Microsoft Windows 2000 SP4 Microsoft Internet Explorer 6 SP1 on Microsoft Windows 2000 SP4 Microsoft Internet Explorer 6 SP1 on Microsoft Windows XP SP1 Microsoft Internet Explorer 6 for Microsoft Windows XP SP2 Microsoft Internet Explorer 6 for Microsoft Windows Server 2003 Microsoft Internet Explorer 6 for Microsoft Windows Server 2003 SP1 Microsoft Internet Explorer 6 for Microsoft Windows Server 2003 (Itanium) Microsoft Internet Explorer 6 for Microsoft Windows Server 2003 with SP1 (Itanium) Microsoft Internet Explorer 6 for Microsoft Windows Server 2003 x64 Edition Microsoft Internet Explorer 6 for Microsoft Windows XP Professional x64 Edition Microsoft Internet Explorer 6 SP1 on Microsoft Windows 98 Microsoft Internet Explorer 6 SP1 on Microsoft Windows 98 SE Microsoft Internet Explorer 6 SP1 on Microsoft Windows Millennium Edition

CPAI-2006-127
	Date:
	Severity:
	Description:	Update Protection against setSlice Integer Overflow Vulnerability (MS06-057)
	Sources:	Microsoft Security Bulletin MS06-057
	Vulnerable Systems:	Microsoft Windows 2000 SP4 Microsoft Windows XP SP1 Microsoft Windows XP SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows Server 2003 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 for (Itanium) Microsoft Windows Server 2003 with SP1 for (Itanium) Microsoft Windows Server 2003 x64 Edition

CPAI-2006-142
	Date:
	Severity:
	Description:	Update Protection against Microsoft Agent Remote Code Execution Vulnerability (MS06-068)
	Sources:	Microsoft Security Bulletin MS06-068
	Vulnerable Systems:	Microsoft Windows 2000 SP4 Microsoft Windows XP SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows Server 2003 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 (Itanium) Microsoft Windows Server 2003 SP1 (Itanium) Microsoft Windows Server 2003 x64 Edition

CPAI-2006-141
	Date:
	Severity:
	Description:	Update Protection against Visual Studio WMI Code Execution Vulnerability (MS06-073)
	Sources:	Microsoft Security Bulletin MS06-073
	Vulnerable Systems:	Microsoft Visual Studio 2005

CPAI-2006-140
	Date:
	Severity:
	Description:	Update Protection against Microsoft XML Remote Code Execution Vulnerability (MS06-071)
	Sources:	Microsoft Security Bulletin MS06-071
	Vulnerable Systems:	Microsoft XML Core Services 4.0 for Windows 2000 SP4 Microsoft XML Core Services 4.0 for Microsoft Windows XP SP2 Microsoft XML Core Services 4.0 for Microsoft Windows Server 2003 Microsoft XML Core Services 4.0 for Microsoft Windows Server 2003 SP1

CPAI-2006-139
	Date:
	Severity:
	Description:	Update Protection against Workstation Service Buffer Overflow Vulnerability (MS06-070)
	Sources:	Microsoft Security Bulletin MS06-070
	Vulnerable Systems:	Microsoft Windows 2000 SP4 Microsoft Windows XP SP2

CPAI-2006-138
	Date:
	Severity:
	Description:	Update Protection against NetWare Client Service Remote Code Execution Vulnerability (MS06-066)
	Sources:	Microsoft Security Bulletin MS06-066
	Vulnerable Systems:	Microsoft Windows 2000 SP4 Microsoft Windows XP SP2 Microsoft Windows Server 2003 Microsoft Windows Server 2003 SP1

CPAI-2006-132
	Date:
	Severity:
	Description:	Preemptive Protection against McAfee HTTP Server Buffer Overflow Vulnerability
	Sources:	FrSIRT/ADV-2006-3861
	Vulnerable Systems:	McAfee ePolicy Orchestrator version 3.5.0 Patch 5 and prior McAfee ProtectionPilot version 1.1.1 Patch 2 and prior

CPAI-2006-131
	Date:
	Severity:
	Description:	Update Protection against W-Agora 'inc_dir' Parameter Remote File Inclusion Vulnerabilities
	Sources:	Secunia Advisory: SA20779 FrSIRT/ADV-2006-2507
	Vulnerable Systems:	W-Agora version 4.2.0 and prior

CPAI-2006-130
	Date:
	Severity:
	Description:	Update Protection against Multiple MySQL Query Commands Vulnerabilities
	Sources:	FrSIRT/ADV-2006-3079 FrSIRT/ADV-2006-3077
	Vulnerable Systems:	MySQL versions 3.x, 4.x and 5.x IBM Informix Dynamic Server versions 7.3, 9.4 and 10.0

CPAI-2006-129
	Date:
	Severity:
	Description:	Update Protection against Microsoft Server Service Vulnerabilities (MS06-063)
	Sources:	Microsoft Security Bulletin MS06-063
	Vulnerable Systems:	Microsoft Windows 2000 SP4 Microsoft Windows XP SP1 and SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows Server 2003 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 for Itanium-based Systems Microsoft Windows Server 2003 with SP1 for Itanium-based Systems

CPAI-2006-126
	Date:
	Severity:
	Description:	Update Protection against phpFullAnnu 'repmod' parameter File Inclusion Vulnerability
	Sources:	FrSIRT/ADV-2006-3493
	Vulnerable Systems:	phpFullAnnu version 5.1 and prior

CPAI-2006-125
	Date:
	Severity:
	Description:	Update Protection against C-News 'path' Parameter File Inclusion Vulnerability
	Sources:	FrSIRT/ADV-2006-3471
	Vulnerable Systems:	C-News version 1.0.1 and prior

CPAI-2006-145
	Date:
	Severity:
	Description:	Integrity Clientless Security (ICS) Update 3.7.116.0
	Sources:	SmartDefense Research Center
	Vulnerable Systems:	Microsoft Windows clients

CPAI-2006-143
	Date:
	Severity:
	Description:	Block MSN Messenger Live 8
	Sources:	SmartDefense Research Center
	Vulnerable Systems:	MSN Messenger Live 8

CPAI-2006-136
	Date:
	Severity:
	Description:	Preemptive Protection against OpenLDAP BIND Denial of Service Vulnerability
	Sources:	Secunia Advisory: SA22750
	Vulnerable Systems:	OpenLDAP version 2.2.29 and prior

CPAI-2006-135
	Date:
	Severity:
	Description:	Integrity Clientless Security (ICS) Update 3.7.111.0
	Sources:	SmartDefense Research Center
	Vulnerable Systems:	Microsoft Windows clients

CPAI-2006-133
	Date:
	Severity:
	Description:	Preemptive Protection against Microsoft Windows 'ipnathlp.dll' Denial of Service Vulnerability
	Sources:	Secunia Advisory: SA22592
	Vulnerable Systems:	Microsoft Windows XP

CPAI-2006-124
	Date:
	Severity:
	Description:	Integrity Clientless Security (ICS) Update 3.7.108.0
	Sources:	SmartDefense Research Center
	Vulnerable Systems:	Microsoft Windows clients

CPAI-2006-123
	Date:
	Severity:
	Description:	Update Protection against OpenSSL RSA Key Signature Forgery Vulnerability
	Sources:	FrSIRT/ADV-2006-3453
	Vulnerable Systems:	OpenSSL version 0.9.7j and prior OpenSSL version 0.9.8b and prior

Defense Updates


CPAI-2006-145
	Date:
	Update Number:	692061129 (Connectra NGX R61/R62) 691061129(Connectra NGX) 690061129 (Connectra 2.0)
	Description:	Integrity Clientless Security (ICS) Update 3.7.116.0


CPAI-2006-144
	Date:
	Update Number:	541061129 (VPN-1 NG R54/R55) 550061129 (VPN-1 NG R55W) 591061129 (VPN-1 NGX R60) 602061129 (VPN-1 NGX R61/R62) 591061129 (VPN-1 VSX NGX) 547061129 (InterSpect 1.x and 2.0) 592061129 (InterSpect NGX)
	Description:	AOL Nullsoft Winamp Ultravox Protection


CPAI-2006-143
	Date:
	Update Number:	541061129 (VPN-1 NG R54/R55) 550061129 (VPN-1 NG R55W) 591061129 (VPN-1 NGX R60) 602061129 (VPN-1 NGX R61/R62) 591061129 (VPN-1 VSX NGX) 547061129 (InterSpect 1.x and 2.0) 592061129 (InterSpect NGX) 692061129 (Connectra NGX R61/R62)
	Description:	MSN Messenger Live 8 Protection


CPAI-2006-142
	Date:
	Update Number:	541061129 (VPN-1 NG R55) 550061129 (VPN-1 NG R55W) 591061129 (VPN-1 NGX R60) 602061129 (VPN-1 NGX R61/R62) 591061129 (VPN-1 VSX NGX) 547061129 (InterSpect 1.x and 2.0) 592061129 (InterSpect NGX)
	Description:	Microsoft Agent Protection (MS06-068)


CPAI-2006-141
	Date:
	Update Number:	541061129 (VPN-1 NG R55) 550061129 (VPN-1 NG R55W) 591061129 (VPN-1 NGX R60) 602061129 (VPN-1 NGX R61/R62) 591061129 (VPN-1 VSX NGX) 547061129 (InterSpect 1.x and 2.0) 592061129 (InterSpect NGX)
	Description:	Visual Studio WMI Protection


CPAI-2006-140
	Date:
	Update Number:	541061129 (VPN-1 NG R55) 550061129 (VPN-1 NG R55W) 591061129 (VPN-1 NGX R60) 602061129 (VPN-1 NGX R61/R62) 591061129 (VPN-1 VSX NGX) 547061129 (InterSpect 1.x and 2.0) 592061129 (InterSpect NGX)
	Description:	Microsoft XML Protection (MS06-071)


CPAI-2006-139
	Date:
	Update Number:	541061129 (VPN-1 NG R55) 550061129 (VPN-1 NG R55W) 591061129 (VPN-1 NGX R60) 602061129 (VPN-1 NGX R61/R62) 591061129 (VPN-1 VSX NGX) 547061129 (InterSpect 1.x and 2.0) 592061129 (InterSpect NGX)
	Description:	Workstation Service Buffer Overflow Protection (MS06-070)


CPAI-2006-138
	Date:
	Update Number:	541061129 (VPN-1 NG R55) 550061129 (VPN-1 NG R55W) 591061129 (VPN-1 NGX R60) 602061129 (VPN-1 NGX R61/R62) 591061129 (VPN-1 VSX NGX) 547061129 (InterSpect 1.x and 2.0) 592061129 (InterSpect NGX)
	Description:	NetWare Client Service Protection (MS06-066)


CPAI-2006-137
	Date:
	Update Number:	541061129 (VPN-1 NG R55) 550061129 (VPN-1 NG R55W) 591061129 (VPN-1 NGX R60) 602061129 (VPN-1 NGX R61/R62) 591061129 (VPN-1 VSX NGX) 547061129 (InterSpect 1.x and 2.0) 592061129 (InterSpect NGX)
	Description:	Novell eDirectory Protection


CPAI-2006-135
	Date:
	Update Number:	692061114 (Connectra NGX R61/R62) 691061114 (Connectra NGX) 690061114 (Connectra 2.0)
	Description:	Integrity Clientless Security (ICS) Update 3.7.111.0


CPAI-2006-131
	Date:
	Update Number:	541061112 (VPN-1 NG R54/R55) 550061112 (VPN-1 NG R55W) 591061112 (VPN-1 NGX R60) 602061112 (VPN-1 NGX R61/R62) 591061112 (VPN-1 VSX NGX) 547061112 (InterSpect 1.x and 2.0) 592061112 (InterSpect NGX) 692061112 (Connectra NGX R61/R62)
	Description:	W-Agora Remote File Inclusion Protection


CPAI-2006-130
	Date:
	Update Number:	547061112 (InterSpect 1.x and 2.0) 592061112 (InterSpect NGX)
	Description:	Multiple MySQL Query Commands Protection


CPAI-2006-129
	Date:
	Update Number:	541061112 (VPN-1 NG R55) 550061112 (VPN-1 NG R55W) 591061112 (VPN-1 NGX R60) 602061112 (VPN-1 NGX R61/R62) 591061112 (VPN-1 VSX NGX) 547061112 (InterSpect 1.x and 2.0) 592061112 (InterSpect NGX)
	Description:	Microsoft Server Service Protections (MS06-063)


CPAI-2006-128
	Date:
	Update Number:	541061112 (VPN-1 NG R55) 550061112 (VPN-1 NG R55W) 591061112 (VPN-1 NGX R60) 602061112 (VPN-1 NGX R61/R62) 591061112 (VPN-1 VSX NGX) 547061112 (InterSpect 1.x and 2.0) 592061112 (InterSpect NGX)
	Description:	Vector Markup Language (VML) Protection (MS06-055)


CPAI-2006-127
	Date:
	Update Number:	541061112 (VPN-1 NG R55) 550061112 (VPN-1 NG R55W) 591061112 (VPN-1 NGX R60) 602061112 (VPN-1 NGX R61/R62) 591061112 (VPN-1 VSX NGX) 547061112 (InterSpect 1.x and 2.0) 592061112 (InterSpect NGX)
	Description:	setSlice Integer Overflow Protection (MS06-057)


CPAI-2006-126
	Date:
	Update Number:	541061112 (VPN-1 NG R54/R55) 550061112 (VPN-1 NG R55W) 591061112 (VPN-1 NGX R60) 602061112 (VPN-1 NGX R61/R62) 591061112 (VPN-1 VSX NGX) 547061112 (InterSpect 1.x and 2.0) 592061112 (InterSpect NGX) 692061112 (Connectra NGX R61/R62)
	Description:	phpFullAnnu File Inclusion Protection


CPAI-2006-125
	Date:
	Update Number:	541061112 (VPN-1 NG R54/R55) 550061112 (VPN-1 NG R55W) 591061112 (VPN-1 NGX R60) 602061112 (VPN-1 NGX R61/R62) 591061112 (VPN-1 VSX NGX) 547061112 (InterSpect 1.x and 2.0) 592061112 (InterSpect NGX) 692061112 (Connectra NGX R61/R62)
	Description:	C-News File Inclusion Protection


CPAI-2006-124
	Date:
	Update Number:	692061023 (Connectra NGX R61/R62) 691061023 (Connectra NGX) 690061023 (Connectra 2.0)
	Description:	Integrity Clientless Security (ICS) Update 3.7.108.0


CPAI-2006-123
	Date:
	Update Number:	541061112 (VPN-1 NG R55) 550061112 (VPN-1 NG R55W) 591061112 (VPN-1 NGX R60) 602061112 (VPN-1 NGX R61/R62) 591061112 (VPN-1 VSX NGX) 547061112 (InterSpect 1.x and 2.0) 592061112 (InterSpect NGX)
	Description:	OpenSSL RSA Key Signature Forgery Protection


CPAI-2006-119
	Date:
	Update Number:	547061112 (InterSpect 1.x and 2.0) 692061112 (Connectra NGX R61/R62)
	Description:	CBSMS Mambo Module Protection


CPAI-2006-118
	Date:
	Update Number:	547061112 (InterSpect 1.x and 2.0)
	Description:	Microsoft Internet Explorer (daxctle.ocx) Protection


CPAI-2006-117
	Date:
	Update Number:	547061112 (InterSpect 1.x and 2.0) 692061112 (Connectra NGX R61/R62)
	Description:	Microsoft Windows MailSlot Protection (MS06-035)


CPAI-2006-116
	Date:
	Update Number:	547061112 (InterSpect 1.x and 2.0)
	Description:	Microsoft Windows RASMAN Protection (MS06-025)


CPAI-2006-115
	Date:
	Update Number:	547061112 (InterSpect 1.x and 2.0)
	Description:	Windows Explorer GUID Protection (MS06-045)


CPAI-2006-114
	Date:
	Update Number:	547061112 (InterSpect 1.x and 2.0)
	Description:	Microsoft Management Console Protection (MS06-044)


CPAI-2006-113
	Date:
	Update Number:	547061112 (InterSpect 1.x and 2.0)
	Description:	Microsoft Windows MHTML Protection (MS06-043)


CPAI-2006-112
	Date:
	Update Number:	547061112 (InterSpect 1.x and 2.0)
	Description:	Microsoft Internet Explorer Memory Corruption Protections (MS06-042)


CPAI-2006-111
	Date:
	Update Number:	547061112 (InterSpect 1.x and 2.0)
	Description:	Malformed DNS ATMA Protection (MS06-041)


SBP-2006-12
	Date:
	Update Number:	541061112 (VPN-1 NG R55) 550061112 (VPN-1 NG R55W) 591061112 (VPN-1 NGX R60) 602061112 (VPN-1 NGX R61/R62) 591061112 (VPN-1 VSX NGX) 547061112 (InterSpect 1.x and 2.0) 592061112 (InterSpect NGX)
	Description:	Protection against Heap Spraying Techniques

You received this email because our records indicate that you wish to be contacted about SmartDefense Updates, Advisories, product news, and security information. If you do not want to receive further mailings, unsubscribe by sending a message with "SIGNOFF SMARTDEFENSE-NEWS" command to LISTSERV@AMADEUS.US.CHECKPOINT.COM in the first line (not the subject).