File(s)
The files below have been obsoleted by a newer Security Update.
Download Security Update 9 Release Notes (PDF)
Download Security Update 9 for Windows 2000
Download Security Update 9 for Windows NT 4.0 x86
Download Security Update 9 for HP-UX
Download Security Update 9 for AIX RS/6000
Download Security Update 9 for IRIX
Download Security Update 9 for Digital UNIX
Download Security Update 9 for Sequent x86
Download Security Update 9 for Solaris SPARC
Download Security Update 9 for RedHat Linux 6.2 and 7.0
Download Security Update 9 User Guide for Windows 2000 (PDF)
Download Security Update 9 User Guide for Windows NT 4.0 x86 (PDF)
Download Security Update 9 User Guide for UNIX (PDF)
Download ESM Operating Requirements Document (PDF)
Download ICE Module Training Guide (PDF)
Checksums
Note: If you are planning on upgrading to ESM 5.1 in the near future, we recommend that you install ESM 5.1 before applying SU9. ESM 5.1 contains SU4. If SU9 is installed to an older version of ESM it will need to be reapplied after ESM 5.1 is installed.
Install Security Update 9 to upgrade the Windows 2000, Windows NT, and UNIX security modules on ESM 4.4, 4.5, and 5.x Agents. For detailed descriptions of new features and enhancements, download the ESM Security Update 9 Release Notes.
New features and enhancements for Agents running on Windows and UNIX systems include:
Patch template enhancements
- Added support for application patches, not just OS patches.
- Can add comments to templates to be displayed on the console.
- Documentation of the OS Patches module expanded to include new Conditions sublist and to warn users against modifying the default Patch templates that are used by the ESM best practice policies.
Template Updates - Patch templates have been updated to include all vendor-released patches through July 25, 2001, for Windows 2000, Window NT, Solaris, HP-UX, AIX, RedHat Linux, and Digital UNIX operating systems.
New features and enhancements for Agents running on Windows systems include:
Password strength module enhanced to support ADS password cracking. User passwords stored in Windows 2000 Active Directory Services are now cracked using the included word lists.
User Guide for Windows 2000 no longer includes tables showing which checks run under ADS, because now all checks run under ADS.
Patch template enhancements
New Patch Keywords template defines variable keywords by their registry key values. After you define a keyword in the Patch Keywords template, such as for a path variable, you can use it in a file path name in the Patch template.
Handles patches without the QID.
New Unknown Services check in the Startup Files module.
New File Attributes Keywords template defines variable keywords by their registry key values. After you define a keyword in the File Attributes Keywords template, such as for a path variable, you can use it in a file path name in the File Attributes template.
New features and enhancements for Agents running on UNIX systems include:
AFS remote mount points now recognized. The Check Local Disk option recognizes Andrew File System (AFS) remote mount points on AIX, Solaris and HP-UX.
DFS remote mount points now recognized. The Check Local Disk option recognizes Distributed File System (DFS) remote mount points on AIX.
Added two new checks: Disallowed Owners and Disallowed Group Owners to the File Find module.
File Content Search enhancements
New Login Retries check checks against a specified value in the Login Parameters module.
Check Not Performed message added to Password Strength checks.
Allow multiple possible owners of files. Checks /tmp directories and world-writable files that do not have the sticky bit set.
Last modified on: Friday, 24-Oct-03 23:42:06
|
