Winchester73 originally reported the problem and provided a temporary work around (See MS update KB951748 and ZoneAlarm --- PROBLEM.) Eventually, ZoneAlarm folks also realized that Winchester73's work around was the best temporary solution until they provided software updates.
Anyone using ZoneAlarm needs to follow the links provided below by Microsoft in the revised Security Bulletin MS08-037. Update ZoneAlarm and, if you haven't done so yet, please install MS08-037 as soon as possible.
Alert - Microsoft Security Bulletin MS08-037 Revised:
On 10 July 2008 Microsoft updated Security Bulletin MS08-037 - Vulnerabilities in DNS Could Allow Spoofing (953230).
Summary
After releasing MS08-037, Microsoft became aware of public reports of a deployment issue affecting ZoneAlarm and Check Point Endpoint Security (previously named Check Point Integrity) customers. Microsoft immediately began investigating and based on its initial investigation, it confirmed that these affected customers may lose connectivity after applying Microsoft Security Bulletin MS08-037.
Microsoft encourages the users of ZoneAlarm to review the appropriate ZoneAlarm Web site (http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html), and Check Point Endpoint users to review the appropriate Check Point Web site (https://supportcenter.checkpoint.com/supportcenter/index.jsp) and the MS08-037 Security Bulletin (http://www.microsoft.com/technet/security/bulletin/MS08-037.mspx) for the latest guidance or software updates.
References:
- Microsoft Security Bulletin MS08-037
- Microsoft Knowledge Base Article 953230
- MSRC BLog: July 2008 Bulletin Monthly Release
- The CSS Security Blog
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...
No comments:
Post a Comment