BindView RAZOR Team Issues RapidFire Updates for New Microsoft NetDDE, NNTP Vulnerabilities.

HOUSTON -- What

BindView Corp. (Nasdaq:BVEW) announced today that its RAZOR Rapid Response Team has created security checks for two newly identified critical vulnerabilities. The new vulnerabilities comprise all Microsoft Windows NetDDE and Network News Transfer Protocol (NNTP) services, both considered older communications technologies. Rapid exploitation is a potential risk for both vulnerabilities, since attackers are able to gain control of target systems without requiring user action.

MS04-031: NetDDE allows applications to communicate across networks and contains a buffer overflow that allows remote attackers to execute commands. This vulnerability allows attackers to elevate privileges on the target system. While this technology has largely been replaced with Distributed Component Object Model (DCOM), NetDDE is still available on all Windows platforms. Disabled by default, NetDDE is still required for communication by a number of applications.

MS04-036: NNTP supports e-mail storage and transfer and is primarily used for USENET Newsgroups. The NNTP services are vulnerable to a security flaw that allows for remote command execution.

BindView customers on current maintenance contracts running Vulnerability Management solutions that include bv-Control for Windows can take immediate protective action. BindView's RapidFire Update Service provides customers with immediate access to the updates via automatic distribution, or customers can download the new updates online at www.bindview.com/Advisories/ADV_MSFT04-101304.cfm.

Who is at Risk

It is recommended that customers refer to the Microsoft Advisory for full details. In general, following are the systems affected by these two vulnerabilities:

MS04-031: Organizations at risk include those using Windows NT Server 4.0 Terminal Server Edition Service Pack 6, Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4, Windows XP, Windows XP Service Pack 1, Windows XP 64-Bit Edition Service Pack 1, Windows XP 64-Bit Edition Version 2003, Windows Server 2003, Windows Server 2003 64-Bit Edition, Windows 98, Microsoft Windows 98 Second Edition (SE) and Microsoft Windows Millennium Edition (ME).

MS04-036: Organizations at risk include those using Windows NT Server Service Pack 6a, Windows 2000 Server Service Pack 3 and 4, Windows Server 2003, Windows 2003 64-bit, Exchange 2000 Server Service Pack 3, Exchange 2003 and Exchange 2003 Service Pack 1.

BindView has created vulnerability checks for use with its bv-Control for Windows software to assist customers in locating compromised systems. Once these systems are identified, customers should proceed with the outlined precautionary measures as quickly as possible.

Commentary on the Microsoft Windows NetDDE and NNTP Vulnerability

BindView RAZOR Team experts are available to discuss these new vulnerabilities and share further insight into organizations most at risk, potential outcomes of an attack, as well as additional ways to secure enterprise IT infrastructures. Experts can also discuss the growing number of system vulnerabilities that have been identified in the past few months.

About BindView

BindView Corporation is a leading provider of proactive business policy, IT security and directory management software worldwide. BindView solutions and services enable customers to centralize and automate policy compliance, vulnerability assessment and directory administration across the entire organization. With BindView insight at work(TM), customers benefit from reduced risk and improved operational efficiencies with a verifiable return on investment. More than 20 million licenses have shipped to 5,000 companies worldwide, spanning all major business segments and the public sector. Contact BindView via e-mail at [e-mail] or visit BindView's website at http://www.bindview.com. BindView can also be reached at 800-749-8439 or at 713-561-4000.