Security vulnerability hotlist

[Mark Jurik <mark@xxxxxxxxxxxx>]

Thr are several items in this list:

==================================
ZoneAlarm and Win2000 SP1

If you use ZoneAlarm (an Internet security or "firewall" utility) to 
protect your computer and you install Windows 2000 Service Pack 1 (SP1), 
you must set the ZoneAlarm security level to Medium to maintain Internet 
connectivity.

This problem has occurred with ZoneAlarm 2.1.25, but may also occur with 
other versions.

For more information about the ZoneAlarm utility please contact ZoneLabs:

http://www.zonelabs.com/	

==================================

 Windows 95 and 98 (including second edition)

Windows 95 and 98 respond to IPX ping packets. Malicious users can modify a 
ping packet to make the source address a broadcast address. This will 
result in a broadcast storm and possibly a denial of service.

Windows 95 users can download the patch from 
http://download.microsoft.com/download/win95/Update/8982/W95/EN-US/26533  
4US5.EXE -

Windows 98 and Windows 98 Second Edition users can download the patch from 
http://download.microsoft.com/download/win98/Update/8982/W98/EN-US/26533  
4USA8.EXE

==================================

Security is becoming a monster of an issue.

http://www.zdnet.co.uk/news/2000/27/ns-16597.html

==================================

Mark Jurik
Jurik Research
http://www.jurikres.com