PRODUCT_LINE: BCM ============================================ Software Update Name: BCM370.179-WIN Applicable H/W Platforms: BCM200, BCM400, BCM1000, SRG200 1.0 and SRG400 1.0 Applicable S/W Platforms: BCM 3.7, SRG 1.0 based on BCM 3.7 Category: EMG Installation Recommendations: It is recommended that this patch be applied at the earliest possible time to all new installations and on any installed systems to address a security vulnerability in the operating system. Component & Version: WindowsNT4Server-KB921883-x86-ENU.exe WindowsNT4Server-KB920683-x86-ENU.exe Dependencies: Required patches - None Product Dependencies - None Size: 1.1MB System Impact: time to apply patch ~ 20 min Does patch application force reboot: yes Other - None Limitations: None Patch Removable: No Description: ----------- The following issues are addressed: 1. BCM 200/400/1000 - Security vulnerability with RasMan The BCM / SRG GA products are impacted by MS vulnerabilities MS06-040 and MS06-041. MS06-040 relates to the vulnerability in Server service which could allow remote code execution (921883). MS06-041 relates to the vulnerability in DNS resolution that could allow remote code execution (920683). This patch delivers the necessary Microsoft operating system hotfixes to address these vulnerabilities. CR Q01434931 and Q01434956 This patch includes the content of the following superseded patches: None