BindView Continues to Detect and Eliminate Latest Security Vulnerabilities; Microsoft Acknowledges the BindView RAZOR Team's Ongoing Commitment to Responsible Reporting Practices.

Business/Technology Editors

HOUSTON--(BUSINESS WIRE)--Oct. 9, 2000

BindView Corporation (NASDAQ: BVEW), a leading provider of IT administration and security management solutions, today announced that it identified and Microsoft eliminated recent vulnerabilities in the Microsoft operating system. These latest vulnerabilities could allow a range of effects, including possible Denial of Service Attacks and privilege elevation. The two companies have created a well-defined process for efficiently working together to identify and close these type of vulnerabilities.

"In line with our main objective of understanding software as intimately as possible, the BindView RAZOR Team was able to identify and quickly alert Microsoft to the security vulnerability, proving again that the RAZOR Team constantly ensures that the nation's most popular and important systems are as secure as possible," said Scott Blake, RAZOR team leader for BindView. "We will continue to maintain a very close working relationship with Microsoft to report what we find in a responsible manner, as well as to create an airtight fix that is available as quickly as possible."

The vulnerabilities identified primarily affect the Windows NT 4.0 and Windows 2000 implementations of Local Procedure Call (LPC), the system for inter-processing communication for NT operating systems. Because LPC can only be used on the local machine, none of these vulnerabilities could be exploited remotely. Instead, a malicious user could only exploit them on machines that could be logged onto interactively. Typically, workstations and terminal servers would be chiefly at risk, because, if normal security practices have been followed, normal users will not be allowed to log onto critical servers interactively. This also means that, even in the worst case, the vulnerability would only confer additional local - not domain - privileges on the malicious user.

BindView's RAZOR team of security experts was the first to report these latest vulnerabilities to Microsoft. The issues involved in these vulnerabilities required several months of detailed engineering and BindView worked closely with Microsoft throughout the process. RAZOR was formed in 1998 and can be credited with identifying more than 80 network security vulnerabilities. The team plays a key ongoing role in working with companies like Microsoft to issue patches to dangerous network threats that are identified.

Microsoft has issued a Security Advisory that can be downloaded at http://www.microsoft.com/technet/security/bulletin/MS00-070.asp and includes a URL to the hot fix. BindView customers can download BindView's anti-hacker product, HackerShield 2.0, from www.BindView.com and deploy its Rapid-Fire update feature to find out if the vulnerabilities exist on their networks.

About BindView

BindView is a leading provider of software solutions which enhance business performance by ensuring the integrity and reliability of the IT infrastructure. BindView's comprehensive software offerings secure and simplify the management and administration of network operating systems, directories, and related applications. By enabling corporate IT professionals to effectively leverage their existing technologies, BindView's award-winning products play a critical role in achieving business goals. More than 10 million licenses of BindView's solutions have been shipped worldwide to approximately 5,000 companies, including more than 75 of the Fortune 100 and 24 of the largest 26 U.S. banks. Contact BindView via e-mail at [e-mail] or visit BindView's World Wide Web site at http//www.bindview.com. BindView can also be reached at [phone] or at [phone].

Editors Note: The names of products of other companies mentioned in this document, if any, may be the registered or unregistered trademarks of the owners of the products.

Statements in this news release not based on historical fact are "forward-looking" statements pursuant to the safe harbor provisions of the Private Securities Litigation Reform Act of 1995. Actual results could differ materially because of factors such as, for example, the risks associated with competition within the network management software industry, with rapid technological change, and with BindView's development of and the market's acceptance of new products. Other such factors include the risk factors and other matters described from time to time in BindView's Form 10-K filings, Form 10-Q filings, and other periodic filings with the Securities and Exchange Commission.