BlackICE 3.6.cpw

Posted on Friday, November 17 2006 @ 0:16 CET by LSDsmurf

Changelog:

Fixed an attacker vs. victim reporting error in SSH_Vulnerable_OpenSSH
The PAM tuning parameter, pam.email.executable.extension.blacklist, has been changed to report all of the default file extensions on one line in the pam log file.
Fixed memory leak in the processing of .url files.
The Compound File parser was optimized to reduce space.
The Flash file parser was updated to reduce the potential of a false positive in some circumstances.
Fixed a false positive in Email_HTML_File_URI wherein an IP address in the hostname portion of the URI was incorrectly detected.
Fixed a false positive for SIP_Long_Via_Host and SIP_Unknown_Via_Parameter that could occur in certain networking-relaying configurations.
The IRC parser was updated to more closely adhere to RFC 1459.
The report for URL_file_URI_overflow now displays the correct length value.
A false positive was corrected in HTTP_DotDotDot that occured when using carefully constructed URLs.
False positives were removed for DPS_Magic_Number_DoS.