Section: .. / advisories / cert /
|
See the CERT website for more information.
|
| /// File Name: |
CA-98.01.smurf |
Description:
|
This advisory describes the "smurf" IP Denial-of-Service attacks.
| | File Size: | 20994 | | Last Modified: | Sep 14 07:49:52 1999 |
| MD5 Checksum: | 82dc851afe15546c81d35881dbda7839 |
|
| /// File Name: |
CA-97.27.FTP_bounce |
Description:
|
This advisory discusses the use of the PORT command in the FTP protocol.
| | File Size: | 20831 | | Last Modified: | Sep 14 07:49:49 1999 |
| MD5 Checksum: | 77c719c1b5fb9d32dd994bddd1a4f4b1 |
|
| /// File Name: |
CA-99-01-Trojan-TCP-Wrappers.txt |
Description:
|
The CERT Coordination Center has received confirmation that some copies of the file tcp_wrappers_7.6.tar.gz have been modified by an intruder and contain a Trojan horse.
| | File Size: | 20747 | | Last Modified: | Sep 14 07:50:06 1999 |
| MD5 Checksum: | 0e1c4dec314e921d35aab0f8c74e967d |
|
| /// File Name: |
CA-96.25.sendmail_groups |
Description:
|
The advisory describes a security problem affecting sendmail version 8 relating to group-writable files. Vendor patches and a workaround are included.
| | File Size: | 20528 | | Last Modified: | Sep 14 07:49:11 1999 |
| MD5 Checksum: | 8102a89180cbfbead6c31780fe9f69e6 |
|
| /// File Name: |
CA-99-02-Trojan-Horses |
Description:
|
This advisory describes some problems with Trojan horses.
| | File Size: | 20376 | | Last Modified: | Sep 14 07:50:07 1999 |
| MD5 Checksum: | e843abc8a12d5078c7f10ad94931ede6 |
|
| /// File Name: |
CA-96.14.rdist_vul |
Description:
|
** This advisory supersedes CA-91:20 and CA-94:04. ** It describes a vulnerability in the lookup subroutine of rdist, for which an exploitation script is available. Vendor information and a pointer to a new version of rdist are included.
| | File Size: | 20215 | | Last Modified: | Sep 14 07:48:57 1999 |
| MD5 Checksum: | 2b428acbb9d7a24d412c24781d2b94c4 |
|
| /// File Name: |
CA-2001-02.bind |
Description:
|
CERT Advisory CA-2001-02 - Multiple Vulnerabilities in BIND. Remote bugs have been found in v4.9.x prior to v4.9.8 and v8.2.x prior to v8.2.3 which allow remote attackers to run code as root.
| | Homepage: | http://www.cert.org | | File Size: | 20171 | | Last Modified: | Feb 1 00:26:50 2001 |
| MD5 Checksum: | 2c68dc20f41e984653e136302fc8cebd |
|
| /// File Name: |
CA-95:18.widespread.attacks |
Description:
|
This advisory warns readers of attacks on hundreds of Internet sites in which intruders exploit known vulnerabilities, all of which have been addressed in previous CERT advisories. These advisories are listed.
| | File Size: | 19834 | | Last Modified: | Sep 14 07:48:41 1999 |
| MD5 Checksum: | 5137a730a6a4957f38a847de0e2c1efa |
|
| /// File Name: |
CA-2003-08.winshares |
Description:
|
CERT Advisory CA-2003-08 - There is increased activity targeting Windows shares over ports 137, 138, 139, and 445.
| | Homepage: | http://www.cert.org | | File Size: | 19413 | | Last Modified: | Mar 18 14:36:16 2003 |
| MD5 Checksum: | c6a335f230856f5bc465110717f36e8d |
|
| /// File Name: |
CA-2000-06.kerberos |
Description:
|
CERT Advisory CA-2000-06 - Multiple Buffer Overflows in MIT Kerberos Authenticated Services. Several buffer overflow vulnerabilities exist in the Kerberos authentication software version 4, including implementations included for backwards compatibility in Kerberos 5 implementations. The most severe vulnerability allows remote intruders to gain root privileges on systems running services using Kerberos authentication. If vulnerable services are enabled on the Key Distribution Center (KDC) system, the entire Kerberos domain may be compromised. All known Kerberos 4 implementations derived from MIT sources are believed to be vulnerable. krshd has a remote root vulnerability and v4rcp and ksu have local vulnerabilities. MIT Kerberos team advisory here.
| | File Size: | 19175 | | Last Modified: | May 18 10:55:41 2000 |
| MD5 Checksum: | 6bf467d452adbcdbdb58fa9d7c7f5a0e |
|
| /// File Name: |
CA-97.16.ftpd |
Description:
|
This advisory describes a vulnerability in some versions of ftpd distributed and installed under various Unix platforms. Includes vendor information.
| | File Size: | 19089 | | Last Modified: | Sep 14 07:49:32 1999 |
| MD5 Checksum: | 0f8dc8f73fd8a2c28042f5d0d722ad93 |
|
| /// File Name: |
CA-2000-02.htmltags |
Description:
|
CERT Advisory CA-2000-02 - Malicious HTML Tags Embedded in Client Web Requests. A web site may inadvertently include malicious HTML tags or script in a dynamically generated page based on unvalidated input from untrustworthy sources. Users may unintentionally execute scripts written by an attacker when they follow untrusted links in web pages, mail messages, or newsgroup postings.
| | File Size: | 18957 | | Last Modified: | Feb 3 21:26:26 2000 |
| MD5 Checksum: | 1e798bbe7bbbc42c9608ea1f03b49483 |
|
| /// File Name: |
CA-97.04.talkd |
Description:
|
A vulnerability in talkd(8) program used by talk(1) makes it possible to provide corrupt DNS information to a host and to remotely execute arbitrary commands with root privileges. The advisory includes information on how to solve the general problem as well as the specific one.
| | File Size: | 18571 | | Last Modified: | Sep 14 07:49:17 1999 |
| MD5 Checksum: | 68fba9c8d26263bc31af1ed2639c9629 |
|
| /// File Name: |
CA-97.08.innd |
Description:
|
Originally issued Topic 2 issued This advisory describes two vulnerabilities in INN (the InterNetNews server). One affects versions 1.5 and earlier; the other affects 1.5.1 and earlier. The advisory includes pointers to version 1.5.1 and earlier. Updated information on the second vulnerability was added as "Topic 2." Pointers to all relevant patches are included, along with information from vendors.
| | File Size: | 18493 | | Last Modified: | Sep 14 07:49:21 1999 |
| MD5 Checksum: | ff117c5bcf14949b0a7b05813a43daee |
|
| /// File Name: |
CA-97.06.rlogin-term |
Description:
|
This advisory reports a vulnerability in many implementations of the rlogin program, including eklogin and klogin. Vendor information and a workaround are included.
| | File Size: | 18465 | | Last Modified: | Sep 14 07:49:19 1999 |
| MD5 Checksum: | 78fd56082966061112a5ce4576d73a43 |
|
| /// File Name: |
CA-96.12.suidperl_vul |
Description:
|
This advisory describes a vulnerability in systems that contain the suidperl program and that support saved set-user-ID and saved set-group-ID. Patch information is included.
| | File Size: | 18082 | | Last Modified: | Sep 14 07:48:56 1999 |
| MD5 Checksum: | 9af14e27a03e76ff8d997d958d3404c1 |
|
| /// File Name: |
CA-2002-22.mssql |
Description:
|
CERT Advisory CA-2002-22 - Microsoft SQL Server 7.0, 2000, and Desktop Engine 2000 contains a dozen serious vulnerabilities that allow remote attackers to obtain sensitive information, alter database content, compromise SQL servers, and compromise server hosts.
| | Homepage: | http://www.cert.org | | File Size: | 18025 | | Last Modified: | Jul 30 10:39:22 2002 |
| MD5 Checksum: | d92fb15df3feab5a01cd6cf2cc95093c |
|
| /// File Name: |
CA-99.11.CDE |
Description:
|
Multiple vulnerabilities have been identified in some distributions of the Common Desktop Environment (CDE).
| | File Size: | 17953 | | Last Modified: | Sep 14 07:50:15 1999 |
| MD5 Checksum: | 8a961138a00baf29495fb6d2db6f4966 |
|
| /// File Name: |
CA-2002-20.tooltalk |
Description:
|
CERT Advisory CA-2002-20 - Two serious remote vulnerabilities have been found in systems running CDE ToolTalk (rpc.ttdbserverd). The first vulnerability allows remote attackers to delete arbitrary files, cause a denial of service, or possibly execute arbitrary code or commands. The second vulnerability allows local attackers to overwrite arbitrary files with contents of the attacker's choice.
| | Homepage: | http://www.cert.org | | File Size: | 17922 | | Last Modified: | Jul 11 07:22:45 2002 |
| MD5 Checksum: | 6a38d6225c1b007e7f1505ba7f2f71e8 |
|
| /// File Name: |
CA-2002-06.radius |
Description:
|
CERT Advisory CA-2002-06 - Multiple remote vulnerabilities have been discovered in several implementations of the RADIUS protocol. One of the bugs is a denial of service which allows attackers to execute arbitrary code if they know the shared secret. Affected systems include: Ascend RADIUS versions 1.16 and prior, Cistron RADIUS versions 1.6.4 and prior, FreeRADIUS versions 0.3 and prior, GnuRADIUS versions 0.95 and prior, ICRADIUS versions 0.18.1 and prior, Livingston RADIUS versions 2.1 and earlier, RADIUS (commonly known as Lucent RADIUS) versions 2.1 and prior, RADIUSClient versions 0.3.1 and prior, YARD RADIUS 1.0.19 and prior, and XTRADIUS 1.1-pre1 and prior.
| | Homepage: | http://www.cert.org | | File Size: | 17830 | | Last Modified: | Mar 6 05:11:57 2002 |
| MD5 Checksum: | c70a071e85c79d3fec92ca46819dab3b |
|
| /// File Name: |
CA-97.09.imap_pop |
Description:
|
This advisory reports a vulnerability in some versions of the Internet Message Access Protocol (IMAP) and Post Office Protocol (POP) implementations (imapd, ipop2d, and ipop3d). Vendor and upgrade information are included.
| | File Size: | 17809 | | Last Modified: | Sep 14 07:49:22 1999 |
| MD5 Checksum: | c1825eb50e5bb3da0be50e9cd69e2e67 |
|
| /// File Name: |
malicious_code_FAQ.html |
Description:
|
CERT/CC Malicious Web Scripts FAQ - A problem has recently been identified that can be found on a wide variety of web sites: what you receive from a web site may not be what that site meant to send. If you click on a specially designed link, the site may unknowingly send you bad data, unwanted pictures, and programs (malicious scripts) to compromise your data. The problem is not with web browsers themselves but with how web pages are constructed and how data entering and leaving web sites is validated. "Validate" means ensuring no "unintended" characters are sent back to the client.
| | Homepage: | http://www.cert.org/tech_tips/ | | File Size: | 17558 | | Last Modified: | Feb 7 21:00:20 2000 |
| MD5 Checksum: | 00055408adebcb44c3a895e806085eec |
|
| /// File Name: |
CA-97.23.rdist |
Description:
|
This advisory discusses a buffer overflow problem in rdist. It is a different vulnerability from the one described in CA-96.14.
| | File Size: | 17551 | | Last Modified: | Sep 14 07:49:45 1999 |
| MD5 Checksum: | ea6da4998c1eb28dbce2f119ce602ccb |
|
| /// File Name: |
CA-96.26.ping |
Description:
|
This advisory describes a denial-of-service attack using large ICMP datagrams issued via the ping command. Vendor information is included.
| | File Size: | 17445 | | Last Modified: | Sep 14 07:49:12 1999 |
| MD5 Checksum: | 9137b4491befe0c88a9116cd55124621 |
|
| /// File Name: |
CA-98.10.mime_buffer_overflows |
Description:
|
This advisory reports a vulnerability that exists in some MIME-aware mail and news clients.
| | File Size: | 17299 | | Last Modified: | Sep 14 07:50:03 1999 |
| MD5 Checksum: | 0da297d5ba397871dcf8aa32e5ccac87 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
