BindView Offers Security Solution to Help Detect and Clean-Up After 'Nimda' Worm; BindView's bv-Control Solution Enables Customers to Eliminate Problems Caused by the New Worm.

Business/Technology Editors

HOUSTON--(BUSINESS WIRE)--Sept. 20, 2001

BindView Corporation (NASDAQ: BVEW), a leading provider of IT security management and administration solutions, announced today a security solution that not only detects the new "Nimda" worm but takes steps to eliminate some of the problems associated with it. This new worm is known to attack Windows NT and Windows 2000 servers running Microsoft's Internet Information Server (IIS), exploiting the well-known UNICODE directory vulnerability and backdoors left on servers from the recent "Code Red 2" virus. The "Nimda" worm is a danger to anyone who is running unpatched versions of IIS or end-users accessing compromised Web servers from unpatched workstations.

BindView's bv-Control for Windows 2000 product can analyze systems enterprise-wide and report on which systems are vulnerable to the "Nimda" attack, as well as identifying whether systems are currently compromised. bv-Control can also be used to repair damage and eliminate the problems caused by "Nimda" by helping administrators to scrub their file systems of the virus code and remove backdoors that were created by the infection. The BindView RAZOR team, a worldwide team of cutting-edge security researchers, has already produced a preliminary analysis of the "Nimda" worm which is available at www.bindview.com.

To assist the public in detecting and responding to this latest cyberthreat, a trial version of bv-Control for Windows 2000, including templates and reports specifically designed to identify "Nimda" vulnerabilities, infections and help repair damaged systems, is available from BindView Corporation. For more information, see BindView's Web site at http://www.bindview.com or call BindView at [phone] or at [phone].

RAZOR is continuing to enhance the bv-Control solution's capabilities, is assisting BindView customers in their remediation tasks and is completing a detailed technical analysis of "Nimda". BindView also advises customers to implement the latest virus signatures and patches from Microsoft.

"With the multiple distribution methods and the subsequent effects of this threat, `Nimda' can have a serious and damaging impact on your systems," said Scott Blake, security expert and leader of the BindView RAZOR team. "This vulnerability can create `backdoor access' to a compromised server, generate a high level of traffic during its propagation phase and create overwhelming email traffic for messaging servers."

About RAZOR

The RAZOR Team has identified over 80 vulnerabilities and threats since its creation in 1998, including the recently discovered Naptha, a variety of denial-of-service vulnerabilities that exploit the TCP protocol and cause a variety of service degradation effects. The RAZOR Team was also one of the first providers of a solution that scanned for the recently discovered Berkeley Internet Name Daemon (BIND) vulnerability. In addition to identifying security vulnerabilities, the RAZOR Team develops security solutions that defend against vulnerabilities. For more information about RAZOR, visit http://razor.bindview.com.

About BindView Corporation

BindView, the leader in the vulnerability assessment market, provides software solutions which enhance business performance by helping to ensure the integrity of the IT infrastructure. BindView's comprehensive software offerings secure and simplify the management and administration of network operating systems, directories and related applications. By enabling corporate IT professionals to effectively leverage their existing technologies, BindView's award-winning products play a critical role in achieving business goals. More than 20 million licenses of BindView's solutions have been shipped worldwide to approximately 5,000 companies, including more than 75 of the Fortune 100 and 24 of the largest 25 U.S. banks. Contact BindView via e-mail at [e-mail] or visit BindView's World Wide Web site at http://www.bindview.com. BindView can also be reached at [phone] or at [phone].

Editors Note: BindView(R) and the BindView logo used in this document are trademarks of BindView Development Corporation, which may be registered in one or more jurisdictions. The names of products of other companies mentioned in this document, if any, may be the registered or unregistered trademarks of the owners of the products.