Recently SonicWALL made public the fact that its Unified Threat Management (UTM) technology has distributed defensive measures to its customers on a zero day basis against a newly- discovered Windows DNS Server Service vulnerability. SonicWALL, provider of network, Web, email security and backup and recovery solutions, first issued signatures directed to guard subscribers of SonicWALL's dynamic threat prevention services against exploits of this vulnerability on Friday, April 13 and has continued to issue updated signatures as more information and exploits have been discovered.
Names are translated into IP addresses by the DNS Server Service so that requests are routed to the correct server. While the number of exploits has been limited, they are considered dangerous. Because it is a server issue, all users of an infected server can be affected. xploits of this vulnerability can eventually affect servers that run on Microsoft Windows 2000 Server Service Pack 4, Windows Server 2003 SP 1, and Windows Server 2003 SP 2. The DNS Server Service vulnerability is being exploited via RPC requests that run dangerous code in the remote management component of the server. Hackers then can divert web traffic, subsequently forwarding victims to a malicious web site infected with malware when a user of that server types in a web address.
Users of SonicWALL's dynamic threat prevention services are currently protected by main signatures: IPS: SID #2442 -- Windows DNS Server RPC Management Interface BO, Generic 2. GAV: RinBot.A (Worm).
SonicWALL has created unique technologies to deliver zero day gateway anti-virus, anti-spyware and intrusion prevention signatures to its subscribers on a continual basis, allowing them to protect against vulnerabilities like the DNS Server Service vulnerability as well as attacks and exploits such as phishing, viruses, DHA or DoS attacks and more.
The company develops and manufactures comprehensive network security, email security, secure remote access, and backup and recovery solutions. SonicWALL is headquartered in Sunnyvale, California and trades on the NASDAQ under the symbol SNWL.
SonicWALL has been hailed by industry publications such as InfoWorld, PC Magazine, Network World, and SC Magazine for easy to use, high quality, and high performance programs and services. Its appliances have a worldwide installed base of more than 650,000 units, protecting millions of people. A leader in the rapidly growing Unified Threat Management category, SonicWALL's UTM solution features high- performance,solid-state firewalls and VPN utilities with value-added security subscriptions such as anti-virus, intrusion prevention and anti-spyware, for wired and wireless networks of all sizes. Its award-winning SonicWALL Global Management System, which allows network administrators to centrally manage and provision thousands of security appliances across a widely distributed network, further enhances the value businesses realize from a SonicWALL solution.
More information is available here:
http://software.sonicwall.com/applications/ips/index.asp?ev=sig&sigid=2034
https://www.mysonicwall.com/SonicAlert/index.asp?ev=article&id=27
Home
Contact Us
