Title.

XPU 49 released

Date:

4th September 2006

Introduction

X-Press Update 49 is a content update, containing updated security content in the form of new and updated checks and policies, and updated patch databases, policy navigators and console database content. The update is compatible with, and suitable for application to, both Assuria Auditor and ISS System Scanner agents.

* System Scanner and X-Press Update is a trademark of Internet Security Systems inc.

Security content is based on newly published vendor security bulletins (or similar) is included for the agents listed below:

• HP HP-UX 11

• Microsoft Windows 2000 (Server and Professional)

• Microsoft Windows Server 2003

• Red Hat Enterprise Linux (Versions 3 & 4)

• Sun Solaris on SPARC (Versions 7, 8 & 9)

• Sun Solaris on SPARC (Version 10)

Additionally content is provided for the Microsoft Windows 2000 platform, to check that the installed versions of Microsoft Internet Explorer and Microsoft Direct Access Components are still subject to security update support from the vendor. Content is provided for the Sun Solaris agents to check whether user specified services are running, and to optionally report on all services running. Content is provided for the Red Hat Enterprise Linux agent to optionally report on any multi-homed hosts.

A minor fix to the console's tree handling code is also included, to rectify a bug, which may occur if directories with non-standard names are created within the Agent Updates directory structure in the console install directory.

The full manifest of new and changed files for this update are detailed below.

Console update

o Database update

      - Updated information on new and existing checks

    o Policy Navigators

      - AIX 4.3

      - Red Hat Enterprise Linux

      - Sun Solaris

      - Sun Solaris 10

      - Windows 2000

      - Windows 2003

    o Console update

      - tree.tbc

Agent Updates

HP HP-UX 11

    o Updated Patch Database

      - bin/patch_HP-UX.data

      - bin/patch_HP-UX.ref

    o X-Press Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_49.zip

      - lib/xpud3_49.sgn

IBM AIX

    o No checks issued.  IBM have not issued security
       relevant patches

Microsoft Windows 2000 (Server and Professional):

    o New Checks

      - win-ms06kb917008-update

      - win-ms06kb917422-update

      - win-ms06kb918899-update

      - win-ms06kb920670-update

      - win-ms06kb920683-update

      - win-ms06kb920958-update

      - win-ms06kb921398-update

      - win-ms06kb921883-update

      - win-ms06kb922616-update

      - win-no-ie-security-updates

      - win-no-mdac-security-updates

    o Updated Policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - versionChecks

    o X-Press Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_49.zip

      - lib/xpud3_49.sgn

Microsoft Windows Server 2003:

    o New Checks

      - win-ms06kb917422-update

      - win-ms06kb918899-update

      - win-ms06kb920214-update

      - win-ms06kb920670-update

      - win-ms06kb920683-update

      - win-ms06kb921398-update

      - win-ms06kb921883-update

      - win-ms06kb922616-update

    o Updated Policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - versionChecks

    o X-Press Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_49.zip

      - lib/xpud3_49.sgn

Red Hat Enterprise Linux (Versions 3 & 4)

    o New Checks

      - once-only-multihomed

      - RHSA-2006-0298

      - RHSA-2006-0368

      - RHSA-2006-0437

      - RHSA-2006-0500

      - RHSA-2006-0515

      - RHSA-2006-0539

      - RHSA-2006-0568

      - RHSA-2006-0571

      - RHSA-2006-0576

      - RHSA-2006-0577

      - RHSA-2006-0578

      - RHSA-2006-0597

      - RHSA-2006-0598

      - RHSA-2006-0603

      - RHSA-2006-0604

      - RHSA-2006-0608

      - RHSA-2006-0609

      - RHSA-2006-0610

      - RHSA-2006-0611

      - RHSA-2006-0615

    o New Policies

      - multihomed-host

    o Updated Policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - rhsa

     o X-Press Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_49.zip

      - lib/xpud3_49.sgn

Sun Solaris on SPARC (Versions 7, 8 & 9)

    o Updated Patch Database

      - bin/patch_Solaris.data

      - bin/patch_Solaris.ref

    o New Checks

      - tdfc-inet-24

      - tdfc-inet-25

    o X-Press Update Files

      - rulesets/unarchivePolicy

      - signatures/rules/unarchiveCheck.sgn

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_49.zip

      - lib/xpud3_49.sgn

Sun Solaris on SPARC (Version 10)

    o Updated Patch Database

      - bin/patch_Solaris.data

      - bin/patch_Solaris.ref

    o New Checks

      - tdfc-inet-24

      - tdfc-inet-25

    o X-Press Update Files

      - rulesets/unarchivePolicy

      - signatures/rules/unarchiveCheck.sgn

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_49.zip

      - lib/xpud3_49.sgn