republican-creole
Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » MS update KB951748 and ZoneAlarm --- PROBLEM
Search Topic:
Uniqs:
122663
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Security researchers warn of new 'clickjacking' browser bugs »
« Privacy Survey Urged for Counterterror Programs  
page: 1 · 2 · 3 · 4 · 5 · 6 ...23 · 24 · 25
AuthorAll Replies


kelvin

@com.hk
reply to MarkAW
Re: MS update KB951748 and ZoneAlarm --- PROBLEM

Your ZoneAlarm is an old version. The latest version should be 7.x


Siko
Premium
join:2006-11-27
Mechanicsburg, PA
clubs:
reply to winchester73
Ok, so this was the problem. I thought another update was the problem so I did a system restore to restore my update. Tomorrow I'll set the security permission slider to medium and lets see if it can restore the internet connection.


MarkAW
Barry White or lil bratt
Premium
join:2001-08-27
Canada
·Bell Sympatico
·Cogeco Cable

reply to kelvin
said by kelvin :

Your ZoneAlarm is an old version. The latest version should be 7.x
I know my ZA is a old version and that the latest version is 7.x , why do you think i am not having the problems others are having.
--
Advertising is legalized lying. - H.G. Wells
Pleasure in the job puts perfection in the work. - Aristotle


gugarci
Premium
join:2004-02-25
Bergen Co
reply to winchester73
Which version of ZA do you use??? I have an old version also and since I use a router have no plans to update.


Inkognito

@comcast.net
reply to winchester73
I had the same issue with that MS update and Zonealarm. I tried all solutions, and only thing I could do to get my Internet back was to uninstall the update. Well done MS.


Disblows

@comcast.net

said by Inkognito :

I had the same issue with that MS update and Zonealarm. I tried all solutions, and only thing I could do to get my Internet back was to uninstall the update. Well done MS.
How do I do that?

I have the exact same problem. I can only access the internet by setting ZA internet security to 'medium.'


Disblows

@comcast.net

reply to winchester73
said by winchester73 See Profile :

For those of you using ZoneAlarm who installed the windows updates today, you probably already know that your internet connection has died. It appears that KB951748 made changes to the networking files that ZA doesn't see/recognize.

After two hours of messing around, I found an inelegant solution that will work temporarily ... set the Internet Zone Security permission slider from high to medium. The connection will be restored.

I discovered this after I finally figured out ZA was blocking my internet connections, and turned it off. Once everything worked again as normal, I started playing around and hit on this lowered permission setting.

I imagine the ZA forum will be full of better solutions, but thought this would get you back up and running in the short term.
Okay. Uninstalling KB951748 does work. It allows you to set ZA to high settings and access the net.

I've turned off XP update notifications and automatic updates until this problem gets resolved.

The alternative (setting ZA internet settings to 'medium') is way too unacceptable.


w8sdz

join:2001-05-21
Port Orange, FL

reply to winchester73
Do not uninstall the KB951748 update. It's VERY important.

Fixes Released for Massive Internet Security Issue

On July 8th, technology vendors from across the industry will simultaneously release patches for their products to close a major vulnerability in the underpinnings of the Internet. While most home users will be automatically updated, it’s important for all businesses to immediately update their networks. This is the largest synchronized security update in the history of the Internet, and is the result of hard work and dedication across dozens of organizations.

Details here:
»securosis.com/2008/07/08/dan-kam···eleased/
It's far better to run ZoneAlarm in the Medium setting because the DNS poisoning issue can cause your browser to be sent to bad sites.
--
73 de w8sdz - sip:271752@fwd.pulver.com


Disblows

@comcast.net

said by w8sdz See Profile :

Do not uninstall the KB951748 update. It's VERY important.

Fixes Released for Massive Internet Security Issue

On July 8th, technology vendors from across the industry will simultaneously release patches for their products to close a major vulnerability in the underpinnings of the Internet. While most home users will be automatically updated, it’s important for all businesses to immediately update their networks. This is the largest synchronized security update in the history of the Internet, and is the result of hard work and dedication across dozens of organizations.

Details here:
»securosis.com/2008/07/08/dan-kam···eleased/
It's far better to run ZoneAlarm in the Medium setting because the DNS poisoning issue can cause your browser to be sent to bad sites.
Why?

Don't you have to be specifically targeted with the DNS cache poisoning (it's the same issue, different day, right)?

If so, I'd rather surf with a decent modicum of blanket security, than allow my computer resources to be shared.

Am I wrong?


gugarci
Premium
join:2004-02-25
Bergen Co

1 edit
reply to winchester73
To play it safe I've chosen to hide that update. Don't want my wife to accidentally install it. Eventhough I have a sticky by the PC with a "DO NOT INSTALL KB951748".


Disblows

@comcast.net

said by gugarci See Profile :

To play it safe I've chosen to hide that update. Don't want my wife to accidentally install it. Eventhough I have a sticky by the PC with a "DO NOT INSTALL KB951748".
Turn off Microsoft Automatic Updates and Security Alerts until they work the compatibility out (who knows how long that will be).


w8sdz

join:2001-05-21
Port Orange, FL


2 edits
reply to winchester73
Dan Kaminsky will be elaborating much further on the DNS discovery and the solution at Black Hat USA 2008 (August 2-7) in Las Vegas. Let's hope that Microsoft and ZoneAlarm have fixed the KB951748 incompatibilities by that date. If not, the hackers will then have the information they need to exploit our PCs.

Details here (on the right side of the page):
»www.blackhat.com/
--
73 de w8sdz - sip:271752@fwd.pulver.com


Houston TX

@swbell.net
reply to John McD
I was also hit by installing the update.

I uninstalled it via the Control Panel | Add/Remove Programs, rebooted the computer and I had Internet access again.


redxii
too big to fail
Premium,Mod
join:2001-02-26
Texas
reply to winchester73
Fine on my 2 PCs, but I'm not using ZoneAlarm.

Perhaps ZoneAlarm should be fixed. No one should have to fix it for them.


dvd536
as Mr. Pink as they come
Premium
join:2001-04-27
Phoenix, AZ
reply to winchester73
Any problem with NIS 2008 with this update?


Owlbet
Ignite the Ice
Premium,MVM
join:2002-09-24
Palmer, AK
clubs:
On Vista or XP?

I use NIS 2008 on two updated Vista computers and I've had no problems on either machine.


altermatt
Premium
join:2004-01-22
White Plains, NY
·Verizon Online DSL

reply to La Luna
said by La Luna See Profile :

To solve this, just reset the ZA database and the ZA will be "fresh" as when it was first installed
Does this really work? If so, it is a HECK of a lot easier to just nuke the databases than to reinstall the whole program, and a HECK of a lot safer than setting the internet zone to medium.

Is Online Armor affected? I've been meaning to switch for a while, since my ZAPro updates expired, and this might be the motivation.
--
The truth of a thing is the feel of it, not the think of it. -- Stanley Kubrick


Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire


1 edit
reply to La Luna
said by La Luna See Profile :

This is the vague explanation:

If the windows update changed the usual needed files for networking/internet, then the ZA will not see the changes and continue to use the previously known files and ignore the newer files. Even though the file names and locations are still the same from before, now the file size and checksums no longer match.
Vague indeed. Surely ZA would then prompt on the new files if changed. This issue might go deeper into how ZA is working

edit: an added rule might help
»www.castlecops.com/article-6916-···0-0.html
"..
According to the German site Heise Security the problem lies in the personal firewall expecting dns queries only from one udp port. The windows update randomizes the source port for udp queries. Heise Security suggests an allow rule for the firewall, which allows udp-packets from any port to port 53 of the dns server and the respective answers.
.."

Cudni
--
"Mercifully, he hit him with the soft end of the pistol."
Help yourself so God can help you.
Microsoft MVP, 2006 - 2008


IsNotImportant

@hetnet.nl

reply to winchester73
With regard to zonealarm: what worked for me is lowering the Zonealarm level: for internet from "High/stealth" to "Medium/visible but protected".

So for those who when choosing between "KB or Zone" choose "dump Zone", there is another option...


Tude

@net.au

reply to winchester73
I have two machines - one with XP Home and other with XP Pro (both SP3 and ZA). I could not access the internet through browser (IE 7 and Opera 9.51) on either machine after installing KB951748 but could successfully ping one site at least (I only tried google.com.au). Anyway the Home machine appeared to fix itself after a couple of re-boots but I had to uninstall KB51748 to get the Pro machine to work.
-
Forums » Up and Running » Security » SecuritySecurity researchers warn of new 'clickjacking' browser bugs »
« Privacy Survey Urged for Counterterror Programs  
page: 1 · 2 · 3 · 4 · 5 · 6 ...23 · 24 · 25


Sunday, 29-Nov 14:15:44 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [124] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [80] TiVo Sees Record Customer Losses
· [77] Weekend Open Thread
· [76] Verizon CEO: Hulu Will Be Dead Soon
· [69] In-Flight Internet Headed For Bumpy Landing?
· [62] Thanksgiving Open Thread
· [40] EFF Wages War On Fine Print
Most people now reading
· Is Easynews down? [Filesharing Software]
· Are GPS's better today? [General Questions]
· Windows 7 boot manager editing questions [Microsoft Help]
· Grey Cup on the Web? [Canadian Chat]
· [NFL] Week 12 Games Thread [Sports Chat]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Samsung LCD TV No Picture but has Sound [Electronics]
· [Newsgroups] Newzleech down? [Filesharing Software]
· [WIN7] Let's See Your Win 7 Desktop [Microsoft Help]
· [ PVP] Druid pvp where to start? [World of Warcraft]