Title.

Assuria Auditor AutoUpdate #83

Introduction

Assuria Auditor AutoUpdate #83 is a content update and minor functionality update.

The update is compatible with, and suitable for application to all Assuria Auditor agents.

Inventory - Networks for Windows 2000 and 2003

The Inventory Baseline has been enhanced on Windows 2000 and Windows 2003 to show the networks available to the servers and which are connected.  Both Local networks and VPNs are shown with their connection status. The VPN information shows both the connection address and the IP address assigned to the server on that network.

Other Changes

Other changes made in the AutoUpdate are:

·         AIX RC script checks have been enhanced to ensure they have a valid entry in the /etc/inittab file.

·         AIX 4.3 - 5.3 Configure.sh script enhanced to set the full path in the /etc/inittab file when adding the sysscand_rc entry. An updated installation package will be made available shortly after the release of this update.

·         The global variable list in the console has been updated.

·         Policy navigators have been enhanced to offer better presentation of, and navigation by, variable names.

Update details

This information is also held in a 'readme.txt' file in the Assuria Auditor Console's install directory.

Console update

o Database update

o Policy Navigators updated for

      - HP HP-UX 11 (PA-RISC)

      - HP HP-UX 11 (IA-64)

      - IBM AIX 4.3.3, 5.1, 5.2, 5.3

      - IBM AIX 6.1

      - Microsoft Windows 2000 (Server and Professional)

      - Microsoft Windows Server 2003

      - Microsoft Windows Server 2008

      - Novell SUSE Enterprise Linux 9 (x86)

      - Novell SUSE Enterprise Linux 10 (x86)

      - Red Hat Enterprise Linux 3, 4, 5

      - Sun Solaris 8

      - Sun Solaris 9

      - Sun Solaris 10 (SPARC)

    o Updated files

      - bin/tcl/class.tbc

      - etc/masteragentvariables.ini

      - etc/xpu_config

Agent updates

Security content based on newly published vendor security bulletins (or similar) is included for the agents listed below:

·         HPUX 11.0, 11.11, 11.23, 11.31 (PA-RISC)

·         HPUX 11.23, 11.31 (Itanium)

·         IBM AIX 4.3.3, 5.1, 5.2, 5.3

·         IBM AIX 6.1

·         Microsoft Windows 2000 (Server and Professional)

·         Microsoft Windows Server 2003

·         Microsoft Windows Server 2008

·         Novell SUSE Enterprise Linux 9 (x86)

·         Novell SUSE Enterprise Linux 10 (x86)

·         Red Hat Enterprise Linux 3 and later (x86 and x64)

·         Sun Solaris 8 (SPARC)

·         Sun Solaris 9 (SPARC)

·         Sun Solaris 10 (SPARC)

HP 11.00, 11.11, 11.23, 11.31 (PA-RISC)

o Updated Patch Databases

      - bin/patch_HP-UX.data

      - bin/patch_HP-UX.ref

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_83.zip

      - lib/xpud3_83.sgn

      - etc/update.ini

HP 11.23, 11.31 (Itanium)

o Updated Patch Databases

      - bin/patch_HP-UX.data

      - bin/patch_HP-UX.ref

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_83.zip

      - lib/xpud3_83.sgn

      - etc/update.ini

IBM AIX 4.3.3, 5.1, 5.2, 5.3

    o New Checks

      - aix-IZ18955-fix

      - aix-IZ19765-fix

      - aix-IZ19905-fix

      - aix-IZ20396-fix

      - aix-IZ20613-fix

      - aix-IZ21494-fix

      - aix-IZ22346-fix

      - aix-IZ22347-fix

      - aix-IZ22348-fix

      - aix-IZ22349-fix

      - aix-IZ22350-fix

      - aix-IZ22351-fix

      - aix-IZ22356-fix

      - aix-IZ22358-fix

      - aix-IZ22370-fix

    o Updated Checks

      - rc-path-cwd

      - sendmail-daemon-enabled

      - sendmail-relaying-features

      - snmp-enabled

    o Updated Files

      - bin/procs/tools.tcl

      - Configure.sh

    o Updated Policies

      - aix-fixes

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_83.zip

      - lib/xpud3_83.sgn

      - etc/update.ini

IBM AIX 6.1

    o New Checks

      - aix-IZ18955-fix

      - aix-IZ19765-fix

      - aix-IZ19905-fix

      - aix-IZ20396-fix

      - aix-IZ20613-fix

      - aix-IZ21494-fix

      - aix-IZ22346-fix

      - aix-IZ22347-fix

      - aix-IZ22348-fix

      - aix-IZ22349-fix

      - aix-IZ22350-fix

      - aix-IZ22351-fix

      - aix-IZ22356-fix

      - aix-IZ22358-fix

      - aix-IZ22370-fix

    o Updated Checks

      - rc-path-cwd

      - sendmail-daemon-enabled

      - sendmail-relaying-features

      - snmp-enabled

    o Updated Files

      - bin/procs/tools.tcl

    o Updated Policies

      - PatchChecks

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_83.zip

      - lib/xpud3_83.sgn

      - etc/update.ini

Microsoft Windows 2000 (Server and Professional)

    o New Checks

      - win-ms08kb950974

      - win-ms08kb952954

      - win-ms08kb953747

      - win-ms08kb953838

    o Updated Files

      - bin/procs/proc_inventory.tcl

    o Updated Policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - versionChecks

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_83.zip

      - lib/xpud3_83.sgn

      - etc/update.ini

Microsoft Windows Server 2003

    o New Checks

      - win-ms08kb950974

      - win-ms08kb952954

      - win-ms08kb953747

      - win-ms08kb953838

    o Updated Files

      - bin/procs/proc_inventory.tcl

    o Updated Policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - versionChecks

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_83.zip

      - lib/xpud3_83.sgn

      - etc/update.ini

Microsoft Windows Server 2008

    o New Checks

      - win-ms08kb950974

      - win-ms08kb953733

      - win-ms08kb953747

      - win-ms08kb953838

    o Updated Files

      - bin/procs/proc_inventory.tcl

    o Updated Policies

      - PatchChecks

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_83.zip

      - lib/xpud3_83.sgn

      - etc/update.ini

Novell SUSE Enterprise Linux 9 (x86)

    o Updated checks

      - SuSE-SA-2008-032

      - SuSE-SA-2008-033

      - SuSE-SA-2008-034

      - SuSE-SA-2008-038

      - SuSE-SA-2008-039

    o Updated policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - ssa

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_83.zip

      - lib/xpud3_83.sgn

      - etc/update.ini

Novell SUSE Enterprise Linux 10 (x86)

    o Updated checks

      - SuSE-SA-2008-032

      - SuSE-SA-2008-033

      - SuSE-SA-2008-034

      - SuSE-SA-2008-038

      - SuSE-SA-2008-039

    o Updated policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - ssa

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_83.zip

      - lib/xpud3_83.sgn

      - etc/update.ini

Red Hat Enterprise Linux 3, 4, 5

    o New Checks

      - RHSA-2008-0486

      - RHSA-2008-0533

      - RHSA-2008-0544

      - RHSA-2008-0545

      - RHSA-2008-0555

      - RHSA-2008-0561

      - RHSA-2008-0562

      - RHSA-2008-0575

      - RHSA-2008-0576

      - RHSA-2008-0579

      - RHSA-2008-0581

      - RHSA-2008-0583

      - RHSA-2008-0584

      - RHSA-2008-0594

      - RHSA-2008-0595

      - RHSA-2008-0597

      - RHSA-2008-0598

      - RHSA-2008-0599

      - RHSA-2008-0607

      - RHSA-2008-0616

      - RHSA-2008-0641

      - RHSA-2008-0649

      - RHSA-2008-0665

      - RHSA-2008-0680

      - RHSA-2008-0715

      - RHSA-2008-0725

      - RHSA-2008-0768

      - RHSA-2008-0780

      - RHSA-2008-0790

    o Updated Policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - rhsa

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_83.zip

      - lib/xpud3_83.sgn

      - etc/update.ini

Sun Solaris 8

    o Updated Patch Databases

      - bin/patch_Solaris.data

      - bin/patch_Solaris.ref

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_83.zip

      - lib/xpud3_83.sgn

      - etc/update.ini

Sun Solaris 9

    o Updated Patch Databases

      - bin/patch_Solaris.data

      - bin/patch_Solaris.ref

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_83.zip

      - lib/xpud3_83.sgn

      - etc/update.ini

Sun Solaris 10 (SPARC)

     o Updated Patch Databases

      - bin/patch_Solaris.data

      - bin/patch_Solaris.ref

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_83.zip

      - lib/xpud3_83.sgn

      - etc/update.ini