Software Update: BlackICE Protection 3.6.cov

Internet Security Systems has released a new version of the BlackICE firewall. The software is available in a version for computers and for servers. The version number for both versions is the same, namely 3.6.cov. BlackICE is a versatile firewall with an intrusion detection system. Both the incoming and outgoing network flows are checked and if there is a possible suspicion that something is wrong, the administrator is warned and the connection can be closed. The full release notes are up this page here are the main changes:

New Security Content For 3.6.cov

• Issue ID: 2121043
• SecChk ID: 23846
• ProductCheckName: Image_WMF_Generic_RecordSize_Overflow
• Event Type: Unauthorized Access Attempt
• Risk Level: High

Security Content Improvements in 3.6.cov

• A false negative was removed from MSRPC_Spoolss_Overflow by updating the signature’s default threshold.
• A false negative was removed from WINS_PointerHijack by expanding parser inspection of the WINS protocol.
• A false negative was removed from SQL_PreAuth_Overflow by adding inspection of SQL login sessions.
• A false negative was removed from HTML_JS_Window_Code_Exec.

[break]The following downloads are available:
BlackICE PC Protection 3.6.cov
BlackICE Server Protection 3.6.cov[break]