Check Point Provides Preemptive Protection Against Santy.C Worm
Check Point Customers Protected in Advance of Command Injection Vulnerability; Additional Proof Point for Proactive Protection Against Unknown Attacks REDWOOD CITY, Calif., -- December 27, 2004 - Check Point Software Technologies Ltd. (NASDAQ: CHKP), the worldwide leader in securing the Internet, today announced that its industry-leading VPN-1® Next Generation™ with Application Intelligence and Web Intelligence™ together provide preemptive protection against the Santy.C worm (also known as PhpInclude.Worm). If exploited, the Santy.C command injection vulnerability could allow Web page defacement, data theft and execution of arbitrary code. The worm hit on December 25, 2004, but Check Point has provided a defense against this worm since December 21, 2004. PHP, a widely used server-side scripting language used to create dynamic Web pages, is especially suited for Web development since it can be easily embedded into HTML. The Santy.C worm uses search engines like Google and Yahoo! to enable a remote attacker to inject malicious code into PHP scripts. Users of VPN-1 Next Generation with Application Intelligence, Web Intelligence and Connectra who implemented the December 21st SmartDefense™ Special Advisory (CPSA-2004-07) are automatically protected against this vulnerability. Specifically, Check Point Web Intelligence provides command injection protection by looking for system commands in forms input and in URLs. For more information on Check Point's Web Intelligence, please visit http://www.checkpoint.com/products/web_intelligence/index.html. SmartDefense is a management feature set included with Check Point firewalls and VPNs that enables customers to configure their network to proactively protect against known and unknown attacks. It provides customers with the best network- and application-level security protection for dynamic Internet threats, such as the Santy.C worm. Additionally, Check Point customers can benefit from the SmartDefense Service, which enables real-time updates and advisories that provide additional protection against these new and emerging threats. A detailed description of the threat and defense is available to subscription customers of the SmartDefense Service. For more information on the Santy.C command injection vulnerability, please see advisory CPAI-2004-69 at http://www.checkpoint.com/defense/advisories/public/2004/cpai-2004-69.html. About Check Point SmartDefense Service About Check Point Software ### ©2004 Check Point Software Technologies Ltd.
All rights reserved. |