SN4869 INX100, ms08-067 vulnerability (kb958644) Downadup/Conficker Security patch deployment for unity sp3.2 systems.

SN4869 INX100, ms08-067 vulnerability (kb958644) Downadup/Conficker Security patch deployment for unity sp3.2 systems. Windows 2000 SN4869 ms08-067 vulnerability (kb958644) Security patch deployment for unity sp3.2 systems Rev. 1 5339206-8EN \PURPOSE/SYMPTOM Risk of the presence of worm exploiting Windows vulnerability MS08-067 on Innova 2100IQ/3100IQ/ 4100 IQ systems. SN4869 ms08-067 vulnerability (kb958644) patch deployment for unity sp3.2 systems Rev. 1 5339206-8EN \PURPOSE/SYMPTOM Risk of the presence of worm exploiting Windows vulnerability MS08-067 on Innova 2100IQ/3100IQ/ 4100 IQ systems. PROBLEM The security bulletin released by Microsoft in October 2008 describes a critical vulnerability MS08-067 that affects the Windows 2000 operating system. At present, different variants of Downadup/Conficker worm exists including GIMMIV.A, W32.Downadup.B, Win32/Conficker.A exploiting this vulnerability. This vulnerability is in the Server Service of Windows 2000 operating system. The symptom of these worms are limited to sending information about the infected computer to a remote website, removing system restore points & conducting DDoS (distributed denial-of-service) attacks against several infected sites. SOLUTION Update the Microsoft Windows 2000 Operating System with the Microsoft Security Patch KB958644. PROCEDURE Note: This SN requires downloading a security patch from Microsoft Server. It is recommended to do it before going on site unless you’re sure a network connection will be available. 1 PREPARATION From the office (or on site if network connection is available): 1. Download the Security patch on your desktop from the below mentioned location: http://www.microsoft.com/downloads/details.aspx?familyid=E22EB3AE-1295-4FE2-9775-6F43C5C2AED3&displaylang=en 2. Copy the patch to a floppy or to a CD. 3. Clearly label the CD with the name of the patch (MS08-067 Security Patch) and SN#. On site: 4. Reset the system and check no unexpected errors are reported in the SUIF. 3 FINALIZATION 1. Remove the Floppy or CD-ROM from DL and leave it on site with the software package along with a copy of the SN as reinstallation might be needed after re-ghosting the DL for example. 2. Check the system before leaving to the customer: • Make a fluoro/record and check no new errors reported in the SUIF. • Check the push is performed normally.