Thursday, July 10, 2008

Alert - Security Bulletin MS08-037 and ZoneAlarm

As I updated the July Security Bulletin post to note, there was a problem encountered by those who use ZoneAlarm Firewall and installed Microsoft Update MS08-037 (KB 951748) which caused a problem connecting to the internet.

Winchester73 originally reported the problem and provided a temporary work around (See MS update KB951748 and ZoneAlarm --- PROBLEM.) Eventually, ZoneAlarm folks also realized that Winchester73's work around was the best temporary solution until they provided software updates.

Anyone using ZoneAlarm needs to follow the links provided below by Microsoft in the revised Security Bulletin MS08-037. Update ZoneAlarm and, if you haven't done so yet, please install MS08-037 as soon as possible.


Alert - Microsoft Security Bulletin MS08-037 Revised:

On 10 July 2008 Microsoft updated Security Bulletin MS08-037 - Vulnerabilities in DNS Could Allow Spoofing (953230).

Summary

After releasing MS08-037, Microsoft became aware of public reports of a deployment issue affecting ZoneAlarm and Check Point Endpoint Security (previously named Check Point Integrity) customers. Microsoft immediately began investigating and based on its initial investigation, it confirmed that these affected customers may lose connectivity after applying Microsoft Security Bulletin MS08-037.

Microsoft encourages the users of ZoneAlarm to review the appropriate ZoneAlarm Web site (http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html), and Check Point Endpoint users to review the appropriate Check Point Web site (https://supportcenter.checkpoint.com/supportcenter/index.jsp) and the MS08-037 Security Bulletin (http://www.microsoft.com/technet/security/bulletin/MS08-037.mspx) for the latest guidance or software updates.


References:





Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

No comments: