Title.

Assuria Auditor AutoUpdate 78 released

Introduction

This update contains security content and updated product features.

This update contains updated console content, new and updated checks and policies, and updated patch databases, policy navigators and console database content. The update is compatible with, and suitable for application to all Assuria Auditor agents.

Inventory Baseline

This is the new baseline facility to monitor changes to the servers hardware components, which is being incrementally released by agent over a series of monthly content updates.

This month, this feature ships for the following agents:

• IBM AIX 4.3.3, 5.1, 5.2, 5.3

• Microsoft Windows 2000 (Server and Professional)

• Microsoft Windows Server 2003

The feature has previously shipped for the following agents:

• Novell SUSE Enterprise Linux 10 (x86)

• Microsoft Windows Server 2008

All other currently supported agents will follow in subsequent content updates. Newly supported agents will contain the feature from their initial release.

P2P Checks

New checks that check for the presence of popular P2P programs are initially added for Windows 2000.   The P2P programs checked for at this release are:

• anubis

• azureus

• bittorrent

• dcplusplus

• emule

• kazaa

• kceasy

• limewire

• morpheus

Support for P2P on Windows Server 2003 and Windows Server 2008 will added in the near future.

Other P2P programs will be added over time.  Users with concern about a particular P2P program should contact Assuria to request an additional check.

HP-UX

There are now updates for HP-UX in this AutoUpdate. 

      - HP HP-UX 11 (PA-RISC)

      - HP HP-UX 11 (IA-64)

This is due to a small challenge with HP changing the format and information contained within its patch information system.  Updated information will be provided as soon as possible.

Security Content Updates

Manifest

The full manifest of new and changed files for this update can be viewed below.

Console update

    o Database update

      - For new checks as above

    o Policy Navigators updated for

      - IBM AIX 4.3, 5.1, 5.2, 5.3

      - Microsoft Windows 2000 (Server and Professional)

      - Microsoft Windows Server 2003

      - Microsoft Windows Server 2008

      - Novell SUSE Enterprise Linux 9 (x86)

      - Novell SUSE Enterprise Linux 10 (x86)

      - Red Hat Enterprise Linux 3 and later (x86 and x64)

      - Sun Solaris 8

      - Sun Solaris 9

      - Sun Solaris 10 (SPARC)

    o Other new files

      - bin/jvmctrl.exe 

    o Other files updated

      - bin/reporter.jar

      - bin/tcl/cystal.tbc

      - bin/tcl/report.tbc

- Store/config/reporter/queries/Administrative/List Agent AU Levels.xml

- Store/config/reporter/queries/Administrative/List Agent Communication Counts.xml

- Store/config/reporter/queries/Administrative/List Agent Communication Details.xml

- Store/config/reporter/queries/Administrative/List Agent Population by Class.xml

- Store/config/reporter/queries/Administrative/List Hosts with OS Name.xml

- Store/config/reporter/queries/Administrative/List Latest Failures.xml

- Store/config/reporter/queries/Administrative/List Latest Scan Stats By Risk Level.xml

- Store/config/reporter/queries/Administrative/List Most Recent Scan Data.xml

- Store/config/reporter/queries/Administrative/List Most Recent Scan.xml

- Store/config/reporter/queries/Administrative/List OS Names.xml

- Store/config/reporter/queries/Administrative/List Ten Most Vulnerable Agents.xml

- Store/config/reporter/queries/Administrative/List Ten Most Vulnerable OS.xml

- Store/config/reporter/queries/Administrative/List Vulnerabilities by OS.xml

- Store/config/reporter/queries/Administrative/List Vulnerability Counts by OS.xml

- Store/config/reporter/queries/Administrative/List Vulnerability Details by OS.xml

- Store/config/reporter/queries/Multi-Session/Auditor/Auditor.xml

- Store/config/reporter/queries/Multi-Session/Auditor/List Standard Codes.xml

- Store/config/reporter/queries/Multi-Session/Auditor/List Standard Groups.xml

- Store/config/reporter/queries/Multi-Session/Executive/List All Completed Scans.xml

- Store/config/reporter/queries/Multi-Session/Executive/List All Risk Levels.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Completed Scans for Network Trends.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Compliance Counts.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Considered Failures.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Considered Scans for Comparison.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Considered Scans.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Distinct Non-Vulnerable Failures for Scans Summary.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Distinct Non-Vulnerable Failures with Host for Scans Summary.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Distinct Platform IDs.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Distinct Platform Names.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Distinct Vulnerabilities for Standard Compliances.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Distinct Vulnerable Failures for Scans Summary.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Distinct Vulnerable Failures with Host for Scans Summary.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Distinct Vulnerable Failures with Sorted IP.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Failure and Checked Totals by Risk Level.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Failure Count.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Failures Short.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Hosts with IP.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Hosts With Platform ID.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Hosts.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Latest Failures.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Latest Scan IDs.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Latest Scans for Standard Compliances.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Latest Scans.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Latest State Data.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Months for Network Trends Analysis.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Non-Obsolete Standard Groups.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Non-Vulnerabilities for Scan Summaries with Sorted IP.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Non-Vulnerabilities for Scan Summaries.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Risk Levels.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Scan Differences.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Scorecard Results by Host.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Scorecard Results by Session.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Standard Group Check Counts.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Total Failures.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Vulnerabilities by Standard.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Vulnerabilities for Scan Summaries with Sorted IP.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Vulnerabilities for Scan Summaries.xml

- Store/config/reporter/queries/Multi-Session/Executive/List Vulnerable Hosts.xml

- Store/config/reporter/queries/Multi-Session/Executive/Network Trends Analysis by Risk Level.xml

- Store/config/reporter/queries/Multi-Session/Executive/Network Trends Analysis.xml

- Store/config/reporter/queries/Multi-Session/Line Management/List Assessment Details.xml

- Store/config/reporter/queries/Multi-Session/Line Management/List Hosts with Sorted IP.xml

- Store/config/reporter/queries/Multi-Session/Technician/List Assessment Details.xml

- Store/config/reporter/styles/assuria-logo-footer.png

- Store/config/reporter/styles/Assuria-Logo-Transparent-blue-notext-small.png

- Store/config/reporter/styles/AssuriaStd.css

- Store/config/reporter/styles/Assuria_Globe_slice_1600-65.jpg

- Store/config/reporter/styles/branding.xsl

- Store/config/reporter/styles/config.xsl

- Store/config/reporter/styles/dark-binary-90.jpg

- Store/config/reporter/styles/fo-utils.xsl

- Store/config/reporter/styles/utils.xsl

- Store/config/reporter/styles/Administrative/Agent AU Level.html.xsl

- Store/config/reporter/styles/Administrative/Agent AU Level.pdf.xsl

- Store/config/reporter/styles/Administrative/Agent Population by OS.html.xsl

- Store/config/reporter/styles/Administrative/Agent Population by OS.pdf.xsl

- Store/config/reporter/styles/Administrative/Last Agent Comms.html.xsl

- Store/config/reporter/styles/Administrative/Last Agent Comms.pdf.xsl

- Store/config/reporter/styles/Administrative/Most Recent Scan.html.xsl

- Store/config/reporter/styles/Administrative/Most Recent Scan.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Latest State.html.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Latest State.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Network Trends Analysis.html.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Network Trends Analysis.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Network Vulnerability Assessment Summary.html.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Network Vulnerability Assessment Summary.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Scan Differences.html.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Scan Differences.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Scans Summary Sorted by Host.html.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Scans Summary Sorted by Host.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Scans Summary Sorted by Vulnerability.html.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Scans Summary Sorted by Vulnerability.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Scorecard.html.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Scorecard.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Ten Most Vulnerable Agents.html.xsl

- Store/config/reporter/styles/Multi-Session/Executive/Ten Most Vulnerable Agents.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Executive/viewrawdata.html.xsl

- Store/config/reporter/styles/Multi-Session/Line Management/Host Assessment Sorted by DNS Name.html.xsl

- Store/config/reporter/styles/Multi-Session/Line Management/Host Assessment Sorted by DNS Name.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Line Management/Host Assessment Sorted by IP Address.html.xsl

- Store/config/reporter/styles/Multi-Session/Line Management/Host Assessment Sorted by IP Address.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Line Management/Vulnerability Assessment Sorted by DNS Name.html.xsl

- Store/config/reporter/styles/Multi-Session/Line Management/Vulnerability Assessment Sorted by DNS Name.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Line Management/Vulnerability Assessment Sorted by IP Address.html.xsl

- Store/config/reporter/styles/Multi-Session/Line Management/Vulnerability Assessment Sorted by IP Address.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Line Management/Vulnerability Assessment Summary.html.xsl

- Store/config/reporter/styles/Multi-Session/Line Management/Vulnerability Assessment Summary.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Technician/Host Assessment Sorted by DNS Name.html.xsl

- Store/config/reporter/styles/Multi-Session/Technician/Host Assessment Sorted by DNS Name.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Technician/Host Assessment Sorted by IP Address.html.xsl

- Store/config/reporter/styles/Multi-Session/Technician/Host Assessment Sorted by IP Address.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Technician/Vulnerability Assessment Sorted by DNS Name.html.xsl

- Store/config/reporter/styles/Multi-Session/Technician/Vulnerability Assessment Sorted by DNS Name.pdf.xsl

- Store/config/reporter/styles/Multi-Session/Technician/Vulnerability Assessment Sorted by IP Address.html.xsl

- Store/config/reporter/styles/Multi-Session/Technician/Vulnerability Assessment Sorted by IP Address.pdf.xsl

- Store/config/reporter/styles/shared/fo-scan-summary.xsl

- Store/config/reporter/styles/shared/scan-summary.xsl

- Store/config/reporter/templates/Administrative/Agent AU Level.xml

- Store/config/reporter/templates/Administrative/Agent Population by OS.xml

- Store/config/reporter/templates/Administrative/Last Agent Comms.xml

- Store/config/reporter/templates/Administrative/Most Recent Scan.xml

- Store/config/reporter/templates/Multi-Session/Executive

- Store/config/reporter/templates/Multi-Session/Line Management

- Store/config/reporter/templates/Multi-Session/Technician

- Store/config/reporter/templates/Multi-Session/Executive/10 Most Vulnerable Agents.xml

- Store/config/reporter/templates/Multi-Session/Executive/Latest State.xml

- Store/config/reporter/templates/Multi-Session/Executive/Network Trends Analysis.xml

- Store/config/reporter/templates/Multi-Session/Executive/Network Vulnerability Assessment Summary.xml

- Store/config/reporter/templates/Multi-Session/Executive/Scan Differences.xml

- Store/config/reporter/templates/Multi-Session/Executive/Scans Summary Sorted by Host.xml

- Store/config/reporter/templates/Multi-Session/Executive/Scans Summary Sorted by Vulnerability.xml

- Store/config/reporter/templates/Multi-Session/Executive/Scorecard.xml

- Store/config/reporter/templates/Multi-Session/Line Management/Host Assessment

- Store/config/reporter/templates/Multi-Session/Line Management/Vulnerability Assessment

- Store/config/reporter/templates/Multi-Session/Line Management/Host Assessment/DNS Name Sort.xml

- Store/config/reporter/templates/Multi-Session/Line Management/Host Assessment/IP Address Sort.xml

- Store/config/reporter/templates/Multi-Session/Line Management/Vulnerability Assessment/DNS Name Sort.xml

- Store/config/reporter/templates/Multi-Session/Line Management/Vulnerability Assessment/IP Address Sort.xml

- Store/config/reporter/templates/Multi-Session/Line Management/Vulnerability Assessment/Summary Report.xml

- Store/config/reporter/templates/Multi-Session/Technician/Host Assessment

- Store/config/reporter/templates/Multi-Session/Technician/Vulnerability Assessment

- Store/config/reporter/templates/Multi-Session/Technician/Host Assessment/DNS Name Sort.xml

- Store/config/reporter/templates/Multi-Session/Technician/Host Assessment/IP Address Sort.xml

- Store/config/reporter/templates/Multi-Session/Technician/Vulnerability Assessment/DNS Name Sort.xml

- Store/config/reporter/templates/Multi-Session/Technician/Vulnerability Assessment/IP Address Sort.xml

Agent updates

IBM AIX 4.3, 5.0, 5.1, 5.2

    o New Checks

      - aix-IZ10220-fix

      - aix-IZ10828-fix

      - aix-IZ10840-fix

      - aix-IZ11244-fix

      - aix-IZ13652-fix

      - aix-IZ13653-fix

      - aix-IZ13654-fix

      - aix-IZ13655-fix

      - aix-IZ15057-fix

      - aix-IZ15100-fix

      - aix-IZ15276-fix

      - aix-IZ15277-fix

      - aix-IZ15479-fix

      - aix-IZ15480-fix

      - aix-IZ15564-fix

      - aix-IZ15565-fix

      - aix-IZ15566-fix

      - aix-IZ15567-fix

      - aix-IZ16975-fix

      - aix-IZ16991-fix

      - aix-IZ17058-fix

      - aix-IZ17059-fix

      - inventory-added

      - inventory-changed

      - inventory-deleted

      - updateInventoryBaseline

    o New Files

      - bin/procs/proc_inventory.tcl

    o New Polices

      - CheckInventoryBaseline

      - UpdateInventoryBaseline

    o Updated Files

      - bin/checker

      - bin/procs/tools.tcl

    o Updated Policies

      - aix-fixes

      - CheckAllBaselines

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

    o X-Press Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_78.zip

      - lib/xpud3_78.sgn

      - etc/update.ini

HP HP-UX 11 (PA-RISC)

None

HP HP-UX 11 (IA-64)

None

Microsoft Windows 2000

   o New Checks

      - inventory-added

      - inventory-changed

      - inventory-deleted

      - p2p-anubis-installed

      - p2p-azureus-installed

      - p2p-bittorrent-installed

      - p2p-dcplusplus-installed

      - p2p-emule-installed

      - p2p-kazaa-installed

      - p2p-kceasy-installed

      - p2p-limewire-installed

      - p2p-morpheus-installed

      - updateInventoryBaseline

      - win-ms08kb941693-update

      - win-ms08kb944338-update

      - win-ms08kb945553-update

      - win-ms08kb947864-update

      - win-ms08kb948590-update

      - win-ms08kb948881-update

    o New Polices

      - CheckAllBaselines

      - CheckInventoryBaseline

      - p2p

      - UpdateInventoryBaseline

    o Updated Policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - versionChecks

    o New Files

      - bin/procs/proc_inventory.tcl

    o Updated Files

      - bin/checker

      - bin/procs/tools.tcl

    o X-Press Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_78.zip

      - lib/xpud3_78.sgn

      - etc/update.ini

Microsoft Windows Server 2003 (x86)

    o New Checks

      - inventory-added

      - inventory-changed

      - inventory-deleted

      - updateInventoryBaseline

      - win-ms08kb941693-update

      - win-ms08kb944338-update

      - win-ms08kb945553-update

      - win-ms08kb947864-update

      - win-ms08kb948590-update

      - win-ms08kb948881-update

    o New Polices

      - CheckAllBaselines

      - CheckInventoryBaseline

      - UpdateInventoryBaseline

    o Updated Policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - versionChecks

    o New Files

      - bin/procs/proc_inventory.tcl

    o Updated Files

      - bin/checker

    o X-Press Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_78.zip

      - lib/xpud3_78.sgn

      - etc/update.ini

Microsoft Windows Server 2008

    o New Checks

      - win-ms08kb941693-update

      - win-ms08kb947864-update

      - win-ms08kb948590-update

      - win-ms08kb948881-update

    o Updated Policies    

      - PatchChecks

    o X-Press Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_78.zip

      - lib/xpud3_78.sgn

      - etc/update.ini

Novell SUSE Enterprise Linux 9 (x86)

    o New Checks

      - SuSE-SA-2008-016

      - SuSE-SA-2008-017

      - SuSE-SA-2008-018

      - SuSE-SA-2008-019

      - SuSE-SA-2008-020

      - SuSE-SA-2008-021

    o Updated Files

      - bin/procs/tools.tcl

    o Updated Policies

      - CheckAllBaselines

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - ssa

    o X-Press Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_78.zip

      - lib/xpud3_78.sgn

      - etc/update.ini

Novell SUSE Enterprise Linux 10 (x86)

    o New Checks

      - SuSE-SA-2008-016

      - SuSE-SA-2008-017

      - SuSE-SA-2008-018

      - SuSE-SA-2008-019

      - SuSE-SA-2008-020

      - SuSE-SA-2008-021

    o Updated Policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - ssa

    o X-Press Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_78.zip

      - lib/xpud3_78.sgn

      - etc/update.ini

Red Hat Enterprise Linux 3 and later (x86 and x64)

    o New Checks

      - RHSA-2008-0042

      - RHSA-2008-0100

      - RHSA-2008-0164

      - RHSA-2008-0167

      - RHSA-2008-0180

      - RHSA-2008-0181

      - RHSA-2008-0182

      - RHSA-2008-0186

      - RHSA-2008-0192

      - RHSA-2008-0193

      - RHSA-2008-0196

      - RHSA-2008-0197

      - RHSA-2008-0206

      - RHSA-2008-0207

      - RHSA-2008-0208

      - RHSA-2008-0209

      - RHSA-2008-0210

      - RHSA-2008-0218

    o Updated Checks

      - RHSA-2008-0146

    o Updated Policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - rhsa

    o X-Press Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_78.zip

      - lib/xpud3_78.sgn

      - etc/update.ini

Sun Solaris 8 (SPARC)

   o Updated Patch Databases

      - bin/patch_Solaris.data

      - bin/patch_Solaris.ref

    o X-Press Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_78.zip

      - lib/xpud3_78.sgn

      - etc/update.ini

Sun Solaris 9 (SPARC)