Section: .. / advisories / cert /
|
See the CERT website for more information.
|
| /// File Name: |
Y2K_FAQ.htm |
Description:
|
CERT Y2K FAQ - Includes information to help sites determine whether a failure is Y2K related or an attack.
| | File Size: | 77824 | | Last Modified: | Dec 18 08:21:33 1999 |
| MD5 Checksum: | 4f6949935197dc418b1cf788f3a2801e |
|
| /// File Name: |
CA-2002-03.snmp |
Description:
|
CERT Advisory CA-2002-03 - Multiple vulnerabilities have been discovered in various Simple Network Management Protocol (SNMP) implementations. These vulnerabilities may allow unauthorized privileged access, denial-of-service attacks, or cause unstable behavior. It is urged that administrators turn off SNMP altogether if it is not currently necessary. Research and discovery made by the University of OULU.
| | Homepage: | http://www.cert.org | | File Size: | 54503 | | Last Modified: | Feb 12 23:54:19 2002 |
| MD5 Checksum: | 39a786620e344c73c71845fa9739eb9d |
|
| /// File Name: |
01-README |
Description:
|
This file.
| | File Size: | 51626 | | Last Modified: | Sep 16 21:12:15 1999 |
| MD5 Checksum: | 1c4c2e4f6920afc609e9d6c1a8da3e2b |
|
| /// File Name: |
CA-2001-09.isn |
Description:
|
Cert Advisory CA-2001-09 - Many systems are vulnerable to Initial Sequence Number (ISN) attacks, allowing attackers to manipulate and spoof tcp connections. Many systems use the Central Limit Theorem to protect the ISN, however these machines are still vulnerable to statistical attack. If the ISNs of future connections of a system are guessed exactly, an attacker will be able to complete a TCP three-way handshake, establish a phantom connection, and spoof TCP packets delivered to a victim. Affected systems include Cisco, FreeBSD prior to 4.3-RELEASE, OpenBSD prior to 2.8-current, Fujitsu, HP/UX, and SGI.
| | Homepage: | http://www.cert.org | | File Size: | 38438 | | Last Modified: | May 3 03:44:14 2001 |
| MD5 Checksum: | 966363ab08fc30683f982ab8819c3d81 |
|
| /// File Name: |
CA-94:05.MD5.checksums |
Description:
|
This advisory gives the MD5 checksums for a number of SunOS files, along with a tool for checking them.
| | File Size: | 31053 | | Last Modified: | Sep 14 07:47:52 1999 |
| MD5 Checksum: | e08dc59003396e03c0fe06967fb23ce4 |
|
| /// File Name: |
CA-97.17.sperl |
Description:
|
This advisory addresses a buffer overflow condition in suidperl (sperl) built from Perl 4.n and Perl 5.n distributions on UNIX systems. It suggests several solutions and includes vendor information and a patch for Perl version 5.003.
| | File Size: | 29974 | | Last Modified: | Sep 14 07:49:33 1999 |
| MD5 Checksum: | 3732a2047f3dffef5d118958863c225c |
|
| /// File Name: |
CA-97.01.flex_lm |
Description:
|
This advisory describes multi-platform UNIX FLEXlm vulnerabilities. These problems may allow local users to create arbitrary files on the system and execute arbitrary programs using the privileges of the user running the FLEXlm daemons.
| | File Size: | 28451 | | Last Modified: | Sep 14 07:49:14 1999 |
| MD5 Checksum: | 0e933250b36e5cc09a16eda5d7d32aef |
|
| /// File Name: |
CA-94:01.ongoing.network.monitoring..> |
Description:
|
This advisory describes ongoing network monitoring attacks. All systems that offer remote access through rlogin, telnet, and ftp are at risk. The advisory includes a description of the activity and suggested approaches for addressing the problem.
| | File Size: | 27549 | | Last Modified: | Sep 14 07:47:46 1999 |
| MD5 Checksum: | 9cc5fcb2a1cf7e700a3b19bb1d2d0116 |
|
| /// File Name: |
CA-96.20.sendmail_vul |
Description:
|
This advisory describes a vulnerability in all versions of sendmail prior to 8.7.6, and includes a workaround and patch information.
| | File Size: | 27176 | | Last Modified: | Sep 14 07:49:04 1999 |
| MD5 Checksum: | 4b21d5c259b9eeabe666aa2e03de41d6 |
|
| /// File Name: |
CA-95:14.Telnetd_Environment_Vulner..> |
Description:
|
This advisory describes a vulnerability with some telnet daemons and includes patch information from vendors, along with a workaround.
| | File Size: | 26674 | | Last Modified: | Sep 14 07:48:37 1999 |
| MD5 Checksum: | 06ab579e8768524b339184aca88c75eb |
|
| /// File Name: |
CA-95:01.IP.spoofing.attacks.and.hi..> |
Description:
|
The IP spoofing portion of this advisory has been superseded by CA-96.21. The description of the intruder activity of hijacking terminals is still current.
| | File Size: | 26137 | | Last Modified: | Sep 14 07:48:07 1999 |
| MD5 Checksum: | 3a95cb7ae1968a12be491dad55d5ed35 |
|
| /// File Name: |
CA-98.05.bind_problems |
Description:
|
This advisory describes three distinct problems in bind, two of which are denial-of-service attacks and one which can allow an intruder to gain root access to your nameserver.
| | File Size: | 25870 | | Last Modified: | Sep 14 07:49:56 1999 |
| MD5 Checksum: | c8712731436b331a08b02842b35ed7dc |
|
| /// File Name: |
CA-2000-12.activex |
Description:
|
CERT Advisory CA-2000-12 - HHCtrl ActiveX Control allows local files to be executed. The HHCtrl ActiveX control has a serious vulnerability that allows remote intruders to execute arbitrary code, if the intruder can cause a compiled help file (CHM) to be stored "locally." Microsoft has released a security bulletin and a patch for this vulnerability, but the patch does not address all circumstances under which the vulnerability can be exploited. This document discusses additional ways in which this vulnerability can be exploited.
| | Homepage: | http://www.cert.org | | File Size: | 25732 | | Last Modified: | Jun 20 22:33:08 2000 |
| MD5 Checksum: | 4460438001a408f57e48c9f6af7b8b30 |
|
| /// File Name: |
y2k-cyberthreats.htm |
Description:
|
CERT Expectations During Y2K - "Cyber Infrastructure and Malicious Expectations during the Y2K Transition Period" discusses potential activities associated with Y2K and offers recommendations.
| | File Size: | 24159 | | Last Modified: | Dec 18 08:23:03 1999 |
| MD5 Checksum: | ed95f63846e32ec4e52d058c185b3f9b |
|
| /// File Name: |
CA-96.08.pcnfsd |
Description:
|
This advisory describes a vulnerability in the pcnfsd program (also known as rpc.pcnfsd). A patch is included.
| | File Size: | 23804 | | Last Modified: | Sep 14 07:48:48 1999 |
| MD5 Checksum: | bcd858cf4118cb86cea659236576662e |
|
| /// File Name: |
CA-2001-18.ldap |
Description:
|
CERT Advisory CA-2001-18 - Several implementations of the Lightweight Directory Access Protocol (LDAP) protocol contain vulnerabilities that may allow denial-of-service attacks and unauthorized privileged access. Vulnerable services include the iPlanet directory server, IBM SecureWay running under Solaris and Windows 2000, Lotus Domino R5 Servers, Teamware Office for Windows NT and Solaris, Qualcomm Eudora WorldMail for Windows NT, Microsoft Exchange 5.5 LDAP Service, Network Associates PGP Keyserver 7.0, prior to Hotfix 2, Oracle 8i Enterprise Edition, and OpenLDAP, 1.x prior to 1.2.12 and 2.x prior to 2.0.8.
| | Homepage: | http://www.cert.org | | File Size: | 23358 | | Last Modified: | Jul 18 02:50:34 2001 |
| MD5 Checksum: | 79332efa3535f9e75b175ec12691c9ce |
|
| /// File Name: |
CA-96.09.rpc.statd |
Description:
|
This advisory describes a vulnerability in the rpc.statd (or statd) program that allows authorized users to remove or create any file that a root user can. Vendor information is included.
| | File Size: | 23289 | | Last Modified: | Sep 14 07:48:50 1999 |
| MD5 Checksum: | 9ff682c9fdf12c351153e421ee58982b |
|
| /// File Name: |
CA-2000-05.netscape |
Description:
|
CERT Advisory CA-2000-05 - Netscape Navigator Improperly Validates SSL Sessions. ACROS advisory included with exploit details and information. All systems running Netscape Navigator 4.72, 4.61, and 4.07 are affected.
| | Homepage: | http://www.cert.org/ | | File Size: | 23233 | | Last Modified: | May 13 04:41:17 2000 |
| MD5 Checksum: | 04fa21f7914d9e4710a5484e5b6688c4 |
|
| /// File Name: |
CA-96.21.tcp_syn_flooding |
Description:
|
** This advisory supersedes the IP spoofing portion of CA-95:01. ** It describes denial-of-service attacks through TCP SYN flooding and IP spoofing. Advice about filtering is included.
| | File Size: | 23015 | | Last Modified: | Sep 14 07:49:05 1999 |
| MD5 Checksum: | ad36afe8596aa155911012e3784d2dff |
|
| /// File Name: |
CA-95:13.syslog.vul |
Description:
|
This advisory describes a general problem with syslog, lists vendor information about patches, and provides a workaround for solving the syslog problem in sendmail in particular.
| | File Size: | 22867 | | Last Modified: | Sep 14 07:48:36 1999 |
| MD5 Checksum: | e39dfff9daefd95c7120a4e998abb18f |
|
| /// File Name: |
CA-96.24.sendmail.daemon.mode |
Description:
|
It describes a security problem relating to the daemon mode in sendmail 8.7 through 8.8.2. The advisory also includes a note about two vulnerabilities in versions 8.8.0 and 8.8.1; these have been fixed as well.
| | File Size: | 22770 | | Last Modified: | Sep 14 07:49:10 1999 |
| MD5 Checksum: | a3f743b790519cf675a1392e59e9963f |
|
| /// File Name: |
CA-95:08.sendmail.v.5.vulnerability |
Description:
|
This advisory describes a vulnerability in sendmail v.5, which is still in use and which includes IDA sendmail. Many vendors have previously fixed the problem, others recently developed patches.
| | File Size: | 22747 | | Last Modified: | Sep 14 07:48:27 1999 |
| MD5 Checksum: | eee46950dd25557fa0dcd27fa9da33da |
|
| /// File Name: |
CA-97.21.sgi_buffer_overflow |
Description:
|
In this advisory, we describe 6 buffer overflow problems in SGI IRIX systems. Problems affect the df, pset, eject, login/scheme, ordist, and xlock programs. Workarounds and a pointer to a wrapper are provided.
| | File Size: | 22013 | | Last Modified: | Sep 14 07:49:40 1999 |
| MD5 Checksum: | 7a764383c709e75dfc3670d806662769 |
|
| /// File Name: |
CA-97.05.sendmail |
Description:
|
This advisory addresses a MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4. The advisory includes vendor information, pointers to the latest version of sendmail, a workaround, and general precautions to take when using sendmail.
| | File Size: | 21852 | | Last Modified: | Sep 14 07:49:18 1999 |
| MD5 Checksum: | 56e62f30ecc526f6f4a77a3cdc35fc89 |
|
| /// File Name: |
CA-96.04.corrupt_info_from_servers |
Description:
|
This advisory describes a vulnerability in network servers that can lead to corrupt information. The advisory includes information on subroutines for validating host names and IP addresses, patches for sendmail, and the status of vendor activity relating to the problem.
| | File Size: | 21012 | | Last Modified: | Sep 14 07:48:44 1999 |
| MD5 Checksum: | a48de544f6e0dd0dd81a0351bb9f1aea |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
