[ news_security_news ]
Check Point Protects Against Santy.C Worm
SecurityProNews
Staff Writer
2004-12-27
 Insider Reports RSS Feed
Check Point Customers Protected in Advance of Command Injection Vulnerability; Additional Proof Point for Proactive Protection Against Unknown Attacks.
Check Point Software's VPN-1 Next Generation with Application Intelligence and Web Intelligence together provide preemptive protection against the Santy.C worm (also known as PhpInclude.Worm). If exploited, the Santy.C command injection vulnerability could allow Web page defacement, data theft and execution of arbitrary code. The worm hit on December 25, 2004, but Check Point has provided a defense against this worm since December 21, 2004.
PHP, a widely used server-side scripting language used to create dynamic Web pages, is especially suited for Web development since it can be easily embedded into HTML. The Santy.C worm uses search engines like Google and Yahoo! to enable a remote attacker to inject malicious code into PHP scripts. Users of VPN-1 Next Generation with Application Intelligence, Web Intelligence and Connectra who implemented the December 21st SmartDefense Special Advisory (CPSA-2004-07) are automatically protected against this vulnerability. Specifically, Check Point Web Intelligence provides command injection protection by looking for system commands in forms input and in URLs.
SmartDefense is a management feature set included with Check Point firewalls and VPNs that enables customers to configure their network to proactively protect against known and unknown attacks. It provides customers with the best network- and application-level security protection for dynamic Internet threats, such as the Santy.C worm. Additionally, Check Point customers can benefit from the SmartDefense Service, which enables real-time updates and advisories that provide additional protection against these new and emerging threats.
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More news_security_news Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
