Blue Lane Releases Inline Patch Update for Critical Security Patch MS06-040; Department of Homeland Security Urges Prompt Patch Installation for High Risk Windows Vulnerability due to Exploit Risk.

CUPERTINO, Calif. -- Blue Lane(TM) Technologies, Inc., provider of the industry's first inline patch proxy for enterprise servers, today announced the immediate availability of an inline patch for its PatchPoint(R) System that instantly addresses the criticality vulnerability covered by the MS06-040 (http://www.microsoft.com/technet/security/bulletin/ms06-040.mspx) security patch from Microsoft. The Microsoft patch eliminates a critical vulnerability in the Windows Server Service that uses the RPC protocol for file sharing between servers. Microsoft has rated the patch as critical and the Department of Homeland Security has issued an advisory through US-CERT (Vulnerability Note VU#650769 (http://www.kb.cert.org/vuls/id/650769)) recommending immediate installation of the patch. This critical vulnerability can be exploited by a non-authenticated user. Because of this threat, organizations with un-patched servers are at severe risk should an exploit be released.

Blue Lane has released an inline patch that protects servers from the MS06-040 vulnerability, allowing servers to operate without service interruption or risk of attack. Many organizations have processes and requirements for patch deployment that make immediate installation of the patch impossible. Furthermore, enterprises with older versions of the Windows operating system (NT, 2000 SP3 or earlier) for which there is no supported patch available, are left without a patch and face the choice of leaving servers unpatched in the near term or immediately installing a newer version of the Windows operating system. Blue Lane protects these unpatched servers without installing any new software or requiring any changes to server configuration by enabling the PatchPoint inline patch for MS06-040.

"The Microsoft security patch released this week eliminates a critical Windows vulnerability that can be easily exploited. Organizations should install the patch as soon as possible or take steps to mitigate the risk of an un-patched system." said Fred Kost, Vice President of Product Marketing and Management for Blue Lane. "For cases where a system cannot be patched immediately, we provide the only viable functional alternative to the actual vendor patch."

Blue Lane customers with a PatchPoint Update subscription can download the Inline Patch Update for MS06-040 and immediately protect unpatched servers. For more information on the Blue Lane PatchPoint solution, visit www.bluelane.com or contact Blue Lane at 1-866-PROTECT.

About Blue Lane Technologies Inc.

Blue Lane provides the industry's first inline patch proxy for enterprise servers that fixes application-specific vulnerabilities at the root cause by checking for the same conditions and applying the same corrective action as the software vendor security patch. Solving the dilemma of "patch now or patch later," PatchPoint instantly secures critical applications and preserves the uptime of the business while eliminating the cost and risks associated with unscheduled patching. Blue Lane is headquartered in Cupertino, California. For more information, contact the company at www.bluelane.com.