• On TechRepublic: Windows 7: Slower to boot than Vista?
July 10, 2008 10:39 AM PDT

ZoneAlarm updated after Microsoft's DNS patch

by Robert Vamosi

On Thursday, Check Point Software Technologies released updated versions of all its ZoneAlarm products, addressing an incompatibility with a patch Microsoft released earlier this week.

The fix requires ZoneAlarm users to download the latest version, 7.0.438.000, from its site. A reboot is required to complete installation.

Since Tuesday, ZoneAlarm customers have complained that access to the Internet was denied after installing MS08-037, a patch designed by Microsoft to correct a vulnerability in both the client and server Domain Name System packages within Windows. Earlier on Tuesday, a security researcher announced a massive, multi-vendor patch release to address a fundamental flaw in DNS that could allow attackers to spoof IP addresses.

Workarounds included uninstalling MS08-037, changing ZoneAlarm's settings from high to medium, or temporarily using the Windows Firewall instead.

Check Point provided no additional comments about the cause of the outage.

As CNET's resident security expert, Robert Vamosi has been interviewed on the BBC, CNN, MSNBC, and other outlets to share his knowledge about the latest online threats and to offer advice on personal and corporate security. Listen to his podcast at securitybites.cnet.com or e-mail Robert with your questions and comments.
advertisement
Click here!
Recent posts from Defense in Depth
Window Snyder to leave Mozilla
How to handle ID fraud's youngest victims
Is white listing going mainstream?
How Live OneCare changed the antivirus landscape
Express Scripts clients threatened with extortion
Study: DDoS attacks threaten ISP infrastructure
Security expert talks Russian gangs, botnets
Extortion used in Express Scripts database breach
Add a Comment (Log in or register) (13 Comments)
  • prev
  • 1
  • next
by aminophenol July 10, 2008 12:10 PM PDT
Ah, who to blame this time?
Reply to this comment
by ambigous July 10, 2008 5:35 PM PDT
Robert, I believe you have a typo on the version number of the fix. I've installed it earlier today and now have ZoneAlarm version 7.0.483.000. BTW for anyone who may care at this point, the specific MS update that caused this issue was KB951748 (XP Security).
Reply to this comment
by rocwoof July 10, 2008 6:55 PM PDT
I also got KB951748 applied to my Win2K installation, and ZA Internet Security Suite started blocking all outbound accesses to ordinary ports, so I went in and configured it to allow access to TCP ports 80, 443, 25, 110, and 995 (for GMail POP3 access). What a PITA!

I have ZA version 7.0.470.000, and check for updates just indicated that is the latest (for what I have at least) - wondering if I can re-set my rules back to defaults - maybe I will just boot back to Ubuntu ;-)
Reply to this comment
by genesterinsac July 10, 2008 8:12 PM PDT
Unfortunately, if you are using an older version of Zone Alarm, you are still hosed.
Microsoft needs to fix the patch! Using Win XP SP3, everything works fine WITHOUT
the MS patch. I upgraded to the latest version of the Zone Alarm firewall and the
machine WOULD NOT BOOT!!! (BSOD) Uninstall current version of Zone Alarm,
reinstall older version and I am working again (but without MS patch). I'll wait for
Microsoft to fix the problem before I patch.
Reply to this comment
by Spimby July 10, 2008 9:54 PM PDT
I just installed both the zone alarm update and the windows update. Did anyone else notice a command window popping up for just a split second after the reboot (actually, about 5 mins after the reboot). *** was that?
Reply to this comment
by xZero2007x July 11, 2008 1:26 AM PDT
lol I got owned by this so badly--or more like my home network anyways. My first thoughts when it updated and I couldn't access the internet with ANY application at all was that Windows latest patches did something. Frustrated and desperate to get on to re-live some Starcraft days with friends, I simply re-formatted and used a backup image I made with Acronis True Image 11 (highly recommended).

Then came the following morning, where I woke to the fine tune of (4) computers, including my own, with the same problem. Dug around in my settings a bit, and tried retracing the steps of Windows Updates and what exactly it installed (at this point, I wish I allowed the updates to be archived to be un-installed in hopes of trial and error), but almost gave up until I tried to kill my firewall, since it seemed like a lock-down (although ZA didn't show any signs of doing so). And there it was--the internet in its over-glorified glory. I did some tinkering around and didn't bother to look up reasons why since I was in a hurry to check something, and just lowered my ZA firewall settings from HIGH/HIGH (internet/trusted zone) to MED/HIGH, and that seemingly did the trick.

Now to find the patch... lol. But I think I will take the advice of the article and.. yeah lol.
Reply to this comment
by WilliamWO July 11, 2008 12:02 PM PDT
HERE IS THE FIX FOR THIS ISSUE!!!!!!!!!!!!!!!

All anyone has to do to alleviate this issue is download and install the latest version of ZoneAlarm. Here is a link that will tank you where you need to go. http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html

Enjoy
WilliamWO
Reply to this comment
by catidakiadam July 12, 2008 9:55 AM PDT
I was one of the 'stranded' single-computer users -- who managed to recover via the Windows XP Restore procedure (which you don't mention). But, only after my 'shot-in-the-dark restore' was I able get back online to research the problem -- which is how I came to read your mini-article.

The Microsoft Manager responsible for the release of Tuesday's MS08-37 update should be made to donate a month's salary to the lowest trainee programmer in Microsoft's 'Back Up and Restore' Department -- as a striking reminder to both people that their untested software can cause a lot of unnecessary grief to thousands.
Reply to this comment
by Zonealarm_Hater July 14, 2008 12:23 AM PDT
Am I the only one that still can't connect. I've tried the new patches, sliding zonealarm to medium setting, deleted everything on my computer that says KB951748, and added the ip addresses to zonealarms zone feature, all to experience a temporary connection that dies within 5 minutes. Anybody else got other ways there problem has been fixed other than the ones given here?
Reply to this comment
by ryaninve July 14, 2008 1:34 PM PDT
Dear Bill to whom do we send the bill,after five hours of trial and error I finally went to restore and found the Email from Zone Alarm who apologised for the incovenience caused by something that was not their fault .I have better things to do with my day off than fix b-----y Microsofts bad management .Now where is that book on Open Source ,Neil Ryan
Reply to this comment
by igolga July 15, 2008 8:58 PM PDT
buy guild wars gold
maplestory mesos
maple story mesos
maple story
maple story
maple story mesos
maplestory mesos
maple story
maple story mesos
maplestory mesos
Reply to this comment
by hrzbq January 10, 2009 8:02 PM PST
??<a href=http://www.wumingbanjia.cn/>??????</a>?????????<a href=http://www.hrzbq.com>??????</a>?????<a href=http://www.szhrz.com>????</a>???<a href=http://www.sz-hrzbj.cn>????</a>

<a href=http://www.sz-hrzbj.cn>????</a>
<a href=http://www.szhrz.com>??????</a>
<a href=http://www.hrzbq.com>????</a>
<a href=http://www.hrzbq.com/banwu.htm>??????</a>
<a href=http://www.sz-hrzbj.cn/szdcgs.htm>??????</a>
<a href=http://www.hrzbq.com/szwbcsz.htm>???????</a>
<a href=http://www.hrzbq.com/szdzgs.htm>??????</a>
<a href=http://www.hrzbq.com/szbcgs.htm>??????</a>
<a href=http://www.sz-hrzbj.cn/lhbjgs.htm>??????</a>
<a href=http://www.sz-hrzbj.cn/ftbjgs.htm>??????</a>
<a href=http://www.sz-hrzbj.cn/nsbjgs.htm>??????</a>
<a href=http://www.sz-hrzbj.cn/ytbjgs.htm>??????</a>
<a href=http://www.sz-hrzbj.cn/babjgs.htm>??????</a>
<a href=http://www.sz-hrzbj.cn/szlhbj.htm>??????</a>
<a href=http://www.sz-hrzbj.cn/lgbjgs.htm>??????</a>
<a href=http://www.sz-hrzbj.cn/bjbjgs.htm>??????</a>
<a href=http://www.wumingbanjia.cn/mayibanjia.htm>????????</a>
<a href=http://www.wumingbanjia.cn/shunfabanjia.htm>????????</a>
<a href=http://www.wumingbanjia.cn/haorizi.htm>?????????</a>
<a href=http://www.sz-hrzbj.cn>??????</a>
Reply to this comment
by hrzbq January 10, 2009 8:03 PM PST
[url=http://www.sz-hrzbj.cn]????[/url]
[url=http://www.szhrz.com]????[/url]
[url=http://www.hrzbq.com]??????[/url]
[url=http://www.hrzbq.com/banwu.htm]??????[/url]
[url=http://www.sz-hrzbj.cn/szdcgs.htm]??????[/url]
[url=http://www.hrzbq.com/szwbcsz.htm]???????[/url]
[url=http://www.hrzbq.com/szdzgs.htm]??????[/url]
[url=http://www.hrzbq.com/szhcsz.htm]??????[/url]
[url=http://www.hrzbq.com/szbcgs.htm]??????[/url]
[url=http://www.sz-hrzbj.cn/lhbjgs.htm]??????[/url]
[url=http://www.sz-hrzbj.cn/ftbjgs.htm]??????[/url]
[url=http://www.sz-hrzbj.cn/nsbjgs.htm]??????[/url]
[url=http://www.sz-hrzbj.cn/ytbjgs.htm]??????[/url]
[url=http://www.sz-hrzbj.cn/babjgs.htm]??????[/url]
[url=http://www.sz-hrzbj.cn/szlhbj.htm]??????[/url]
[url=http://www.sz-hrzbj.cn/lgbjgs.htm]??????[/url]
[url=http://www.sz-hrzbj.cn/bjbjgs.htm]??????[/url]
[url=http://www.sz-hrzbj.cn]??????[/url]
Reply to this comment
(13 Comments)
  • prev
  • 1
  • next
advertisement

FAQ: Buying the right Windows 7 upgrade

Readers still have lots of questions on just which version of the software they need to buy in order to upgrade their PC. CNET News tries to offer some answers.

N.Y. lawsuit details Intel's 'largesse' toward Dell

Attorney General Andrew Cuomo's federal antitrust case filed Wednesday alleges a longstanding symbiotic relationship between Intel and Dell.

About Defense in Depth

Covering computer viruses and computer crime, Robert Vamosi goes beyond the hype to provide you with expert interviews of the top security researchers, as well as offering the hands-on, nontechnical advice you'll need to stay safe online.

Add this feed to your online news reader

Defense in Depth topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right