BindView Offers Solution to Help Protect Against Latest Threats to the Nation's Top eCommerce Sites.

Business/Technology Editors

HOUSTON--(BUSINESS WIRE)--March 12, 2001

bv-Control RapidFire Update(TM) Available for Download from

BindView Web Site

BindView Corporation (NASDAQ: BVEW), a leading provider of IT security management solutions, announced today the availability of free software that checks for three vulnerabilities in Microsoft Windows NT that enabled the largest series of criminal attacks to date to occur at top eCommerce sites. By exploiting these vulnerabilities, groups of Eastern European hackers are reportedly stealing confidential customer data, including more than one million credit card numbers to date.

Customers can deploy the latest RapidFire Update(TM) to BindView's bv-Control for Internet Security product and the bv-Control for Windows 2000/NT product that scans for hundreds of security vulnerabilities, including this recent threat to the Microsoft Windows NT environment. The RapidFire Update(TM), as well as trial versions of the bv-Control for Internet Security product and the bv-Control for Windows 2000/NT product, is available immediately at BindView's Web site at http://www.bindview.com/products/bvControl/internetsec/rapidfire.cfm.

The Federal Bureau of Investigation has warned United States banks and online businesses about this vulnerability. Hackers can download confidential information, customer databases and credit card information. These latest attacks have allegedly affected 40 e-commerce sites in 20 states, with one million credit card numbers stolen so far.

The three vulnerabilities being actively exploited include the ability to gain unauthorized access to IIS servers and execute shell commands as a privileged user. The second vulnerability could allow the remote author of a malicious SQL query to take unauthorized actions on a SQL Server or MSDE database. The third vulnerability could allow malicious users to modify certain registry keys and specify code to launch at system crash or at the next login, as well as disable security measures.

BindView's bv-Control for Internet Security product finds and helps users close these security holes used by hackers to break into servers, workstations and other network devices. The bv-Control for Windows 2000/NT product provides a true enterprise-class security and policy enforcement solution for the Windows 2000/NT operating system. Both products are part of the bv-Control Security Management Suite that provides internal and external auditing, assessment and analysis capabilities. The innovative RapidFire Update(TM) solution allows security checks to be added immediately and automatically as new vulnerabilities surface. This mechanism, in addition to the ease of use and robust functionality of the product, help to ensure a safe networked computing environment.

"This latest round of attacks reminds us how quickly eCommerce transactions can be compromised and the damaging effects that can result," said Kevin Weiss, chief marketing officer at BindView. "BindView's RAZOR security team continues to be a leader in quickly delivering solutions to the public when these vulnerabilities arise. In this case, the result is that BindView is protecting the integrity of eCommerce transactions over the Web."

About BindView Corporation

BindView, the leader in the vulnerability assessment market, provides software solutions which enhance business performance by helping to ensure the integrity of the IT infrastructure. BindView's comprehensive software offerings secure and simplify the management and administration of network operating systems, directories and related applications. By enabling corporate IT professionals to effectively leverage their existing technologies, BindView's award-winning products play a critical role in achieving business goals. More than 10 million licenses of BindView's solutions have been shipped worldwide to approximately 5,000 companies, including more than 75 of the Fortune 100 and 24 of the largest 25 U.S. banks. Contact BindView via e-mail at [e-mail] or visit BindView's World Wide Web site at http//www.bindview.com. BindView can also be reached at [phone] or at [phone].

Editors Note: BindView(R), the BindView logo, and the BindView product names used in this document are trademarks of BindView Development Corporation, which may be registered in one or more jurisdictions. The names of products of other companies mentioned in this document, if any, may be the registered or unregistered trademarks of the owners of the products.