socalgal
02-18-2000, 08:45 PM
Don't know how long it's been out, as I d/l'd it just today. From the ReadMe:
Release Notes for Network ICE BlackICE Defender Release 1.9.14
. blackice.exe version 1.9.14
. blackd.exe version 1.9.14
. blackdll.dll version 1.9.13
. blackdrv.vxd version 1.9.13 (for Win 95/98)
. blackdrv.sys version 1.9.13 (for Win NT)
--What's New in this Release--
. This release fixes several bugs related to BlackICE crashing under
certain conditions:
.. Shutdown page fault or crash
.. Blackd terminating when run over an extended period of time
.. Startup page fault
. The issue related to log files (blackd.log and blackice-service.log)
being created in various seemingly random locations has also been
addressed.
. Filter Failed event as a result of incompatibilities with certain
USB devices has been fixed.
. New attacks BlackICE can detect:
.. Issue ID 2002568, IIS malformed HTW request: Attempt to access
unauthorized data on Web server.
.. Issue ID 2000015, Nestea attack: The attacker overlaps fragments
in a way designed to crash the machine.
.. Issue ID 2001526, NMAP ping: The NMAP program is being used to
probe your system for vulnerabilities.
.. Issue ID 2002567, Cold Fusion cache URL: Attempt to access a Cold
Fusion cache map file containing a list of cached URLs.
-- Known Issues and Limitations --
KNOWN ISSUES
. If you update from 1.8.6.x to 1.9.14 and later uninstall BlackICE,
on Win 98, a Windows registry entry in the
HKLM/Software/Microsoft/Windows/CurrentVersion/Run
(note: HKLM = HKEY_LOCAL_MACHINE)
key to load blackd.exe (specifically the LoadBlackD entry) will
remain. On Win 95, the Windows registry entry in
HKLM/Software/Microsoft/Windows/CurrentVersion/RunServices
may remain as well.
Work-around: Uninstall 1.8.6.x prior to installing 1.9.14. At
worst, you can uninstall BlackICE cleanly using the utility
located at:
http://www.networkice.com/Download/updatebiremove.htm
. Certain intermediate adapter drivers may cause BlackICE to crash.
Work-around: Configure BlackICE to ignore that adapter by adding a
line in blackice.ini, then restarting your system. This web page
explains how to do this:
http://www.networkice.com/Advice/Support/KB/q000023/default.htm
. For Win NT 4: Under certain situations, the floppy drive is
inaccessible when BlackICE is installed.
Work-around: Add the following line to blackice.ini:
starting.i=101
After saving and closing blackice.ini, stop and start the blackice
service in the service list.
. Under certain conditions, BlackICE may terminate when you load
a PGP encrypted volume.
Work-around: Stop the BlackICE protection engine by running the batch
program STOPBLACKD.BAT (for Win 95/98) or stopping the BlackICE service
(for Win NT 4) before mounting the PGP volume. When done, restart the
BlackICE protection engine by running blackd (for Win 95/98) or by
starting the BlackICE service (for Win NT 4).
LIMITATIONS
. BlackICE will prevent certain PDA's to synchronize. If this happens,
stop the blackd.exe process. Specifically,
In Win NT, simply stop the BlackICE service before synchronizing, then
restart the blackice service. In Win 95/98, open a DOS window, then
change directory to c:\program files\network ice\blackice. From there
enter the command "blackd stop". Check the task list until
the process blackd.exe is gone. When it is gone, work on your PDA to
synchronize. To restart the blackd.exe process, in the same DOS
window, enter the command "blackd start".
. Versions older than 2.5 of Cookie Crusher are incompatible with BlackICE.
Removing the Cookie Crusher fixes the problem.
. The parameter "adapters.enabledxxx = false" was originally intended to
force BlackICE to ignore traffic from the specified adapter. At
present it will only prevent BlackICE from opening the specified
adapter, and will continue to monitor traffic and protect against
intrusions from that adapter.
Release Notes for Network ICE BlackICE Defender Release 1.9.14
. blackice.exe version 1.9.14
. blackd.exe version 1.9.14
. blackdll.dll version 1.9.13
. blackdrv.vxd version 1.9.13 (for Win 95/98)
. blackdrv.sys version 1.9.13 (for Win NT)
--What's New in this Release--
. This release fixes several bugs related to BlackICE crashing under
certain conditions:
.. Shutdown page fault or crash
.. Blackd terminating when run over an extended period of time
.. Startup page fault
. The issue related to log files (blackd.log and blackice-service.log)
being created in various seemingly random locations has also been
addressed.
. Filter Failed event as a result of incompatibilities with certain
USB devices has been fixed.
. New attacks BlackICE can detect:
.. Issue ID 2002568, IIS malformed HTW request: Attempt to access
unauthorized data on Web server.
.. Issue ID 2000015, Nestea attack: The attacker overlaps fragments
in a way designed to crash the machine.
.. Issue ID 2001526, NMAP ping: The NMAP program is being used to
probe your system for vulnerabilities.
.. Issue ID 2002567, Cold Fusion cache URL: Attempt to access a Cold
Fusion cache map file containing a list of cached URLs.
-- Known Issues and Limitations --
KNOWN ISSUES
. If you update from 1.8.6.x to 1.9.14 and later uninstall BlackICE,
on Win 98, a Windows registry entry in the
HKLM/Software/Microsoft/Windows/CurrentVersion/Run
(note: HKLM = HKEY_LOCAL_MACHINE)
key to load blackd.exe (specifically the LoadBlackD entry) will
remain. On Win 95, the Windows registry entry in
HKLM/Software/Microsoft/Windows/CurrentVersion/RunServices
may remain as well.
Work-around: Uninstall 1.8.6.x prior to installing 1.9.14. At
worst, you can uninstall BlackICE cleanly using the utility
located at:
http://www.networkice.com/Download/updatebiremove.htm
. Certain intermediate adapter drivers may cause BlackICE to crash.
Work-around: Configure BlackICE to ignore that adapter by adding a
line in blackice.ini, then restarting your system. This web page
explains how to do this:
http://www.networkice.com/Advice/Support/KB/q000023/default.htm
. For Win NT 4: Under certain situations, the floppy drive is
inaccessible when BlackICE is installed.
Work-around: Add the following line to blackice.ini:
starting.i=101
After saving and closing blackice.ini, stop and start the blackice
service in the service list.
. Under certain conditions, BlackICE may terminate when you load
a PGP encrypted volume.
Work-around: Stop the BlackICE protection engine by running the batch
program STOPBLACKD.BAT (for Win 95/98) or stopping the BlackICE service
(for Win NT 4) before mounting the PGP volume. When done, restart the
BlackICE protection engine by running blackd (for Win 95/98) or by
starting the BlackICE service (for Win NT 4).
LIMITATIONS
. BlackICE will prevent certain PDA's to synchronize. If this happens,
stop the blackd.exe process. Specifically,
In Win NT, simply stop the BlackICE service before synchronizing, then
restart the blackice service. In Win 95/98, open a DOS window, then
change directory to c:\program files\network ice\blackice. From there
enter the command "blackd stop". Check the task list until
the process blackd.exe is gone. When it is gone, work on your PDA to
synchronize. To restart the blackd.exe process, in the same DOS
window, enter the command "blackd start".
. Versions older than 2.5 of Cookie Crusher are incompatible with BlackICE.
Removing the Cookie Crusher fixes the problem.
. The parameter "adapters.enabledxxx = false" was originally intended to
force BlackICE to ignore traffic from the specified adapter. At
present it will only prevent BlackICE from opening the specified
adapter, and will continue to monitor traffic and protect against
intrusions from that adapter.