Section: .. / advisories / cert /
|
See the CERT website for more information.
|
| /// File Name: |
CA-2002-28.sendmail |
Description:
|
CERT Advisory CA-2002-28 - Sendmail 8.12.6 was backdoored on September 28, 2002 to include a trojan which executes commands via outbound port 6667 connections.
| | Homepage: | http://www.cert.org | | File Size: | 9461 | | Last Modified: | Oct 10 02:21:03 2002 |
| MD5 Checksum: | f6a94b46de29c16173327843a102489e |
|
| /// File Name: |
CA-2002-27.sslworm |
Description:
|
Cert Advisory CA-2002-27 - Linux systems running Apache with mod_ssl accessing SSLv2-enabled OpenSSL 0.9.6d or earlier on Intel x86 architectures are being automatically exploited by a worm which takes advantage of VU#102795 in OpenSSL. The worm scans for vulnerable systems on port 80, then sends exploit code over port 443. The worm also functions as a ddos network which communicates over TCP port 2002. Infected systems can be identified by the presence of /tmp/.bugtraq.c. Fix available here.
| | Homepage: | http://www.cert.org | | File Size: | 10709 | | Last Modified: | Sep 16 08:49:18 2002 |
| MD5 Checksum: | b9252e793f07959aadcae76697f1158f |
|
| /// File Name: |
CS-2002-03 |
Description:
|
Unavailable.
| | File Size: | 8327 | | Last Modified: | Sep 1 00:51:08 2002 |
| MD5 Checksum: | cdd88fe75408ba5c8faaa0769102f8bc |
|
| /// File Name: |
CA-2002-26.tooltalk |
Description:
|
CERT Advisory CA-2002-26 - The Common Desktop Environment (CDE) ToolTalk RPC database server contains a heap overflow vulnerability that could allows remote attackers to execute arbitrary code.
| | Homepage: | http://www.cert.org | | File Size: | 14456 | | Related CVE(s): | CAN-2002-0679 | | Last Modified: | Aug 13 08:33:39 2002 |
| MD5 Checksum: | 82c668c15b22cbde6c13d68197828cdc |
|
| /// File Name: |
CA-2002-25.xdr |
Description:
|
CERT Advisory CA-2002-25 - The Sun Microsystems XDR library contains overflows which lead to exploitable vulnerabilities in many applications. The xdr_array() function commonly used in RPC calls is the source of the vulnerabilities. Specific impacts reported include the ability to execute arbitrary code with root privileges (by exploiting dmispd, rpc.cmsd, or kadmind, for example). In addition, intruders who exploit the XDR overflow in MIT KRB5 kadmind may be able to gain control of a Key Distribution Center (KDC) and improperly authenticate to other services within a trusted Kerberos realm.
| | Homepage: | http://www.cert.org | | File Size: | 14450 | | Related CVE(s): | CAN-2002-0391 | | Last Modified: | Aug 6 08:09:27 2002 |
| MD5 Checksum: | bf6565a3708b0fc74081256d5054d6dd |
|
| /// File Name: |
CA-2002-24.openssh.trojan |
Description:
|
CERT Advisory CA-2002-24 - OpenSSH was trojaned from July 30 to Aug 1, allowing remote attackers to execute commands over a port 6667 connection. Versions openssh-3.2.2p1.tar.gz, openssh-3.4.tgz, and openssh-3.4p1.tar.gz were replaced. In the future check the GPG signature.
| | Homepage: | http://www.cert.org | | File Size: | 7614 | | Last Modified: | Aug 6 07:11:42 2002 |
| MD5 Checksum: | e84c9dfca68a40aa713fe8ebdcdc6d75 |
|
| /// File Name: |
CA-2002-23.openssl |
Description:
|
CERT Advisory CA-2002-23 - OpenSSL prior to 0.9.6e, up to and including pre-release 0.9.7-beta2 contains four remotely exploitable buffer overflows. Overflows exist during the SSLv2 handshake process, SSLv3 handshake process, Kerberos SSLv3 handshakes, and holding of ASCII representations of integers. Denial of service vulnerabilities exist in the handing of ASN.1 encoding. Version 0.9.6e of OpenSSL is recommended.
| | Homepage: | http://www.cert.org | | File Size: | 11749 | | Last Modified: | Jul 31 08:10:20 2002 |
| MD5 Checksum: | 5a3c9112a299983104f3207c37a604b8 |
|
| /// File Name: |
CA-2002-22.mssql |
Description:
|
CERT Advisory CA-2002-22 - Microsoft SQL Server 7.0, 2000, and Desktop Engine 2000 contains a dozen serious vulnerabilities that allow remote attackers to obtain sensitive information, alter database content, compromise SQL servers, and compromise server hosts.
| | Homepage: | http://www.cert.org | | File Size: | 18025 | | Last Modified: | Jul 30 10:39:22 2002 |
| MD5 Checksum: | d92fb15df3feab5a01cd6cf2cc95093c |
|
| /// File Name: |
CA-2002-21.php |
Description:
|
CERT Advisory CA-2002-21 - Another file upload vulnerability has been discovered in PHP which can allow remote code execution. X86 systems are difficult to remotely execute code on but can still be crashed.
| | Homepage: | http://www.cert.org | | File Size: | 11397 | | Last Modified: | Jul 23 19:31:52 2002 |
| MD5 Checksum: | e6a875b4bd735f98cafc7f3932823ebd |
|
| /// File Name: |
CA-2002-20.tooltalk |
Description:
|
CERT Advisory CA-2002-20 - Two serious remote vulnerabilities have been found in systems running CDE ToolTalk (rpc.ttdbserverd). The first vulnerability allows remote attackers to delete arbitrary files, cause a denial of service, or possibly execute arbitrary code or commands. The second vulnerability allows local attackers to overwrite arbitrary files with contents of the attacker's choice.
| | Homepage: | http://www.cert.org | | File Size: | 17922 | | Last Modified: | Jul 11 07:22:45 2002 |
| MD5 Checksum: | 6a38d6225c1b007e7f1505ba7f2f71e8 |
|
| /// File Name: |
CA-2002-19.resolver |
Description:
|
CERT Advisory CA-2002-19 - A buffer overflow vulnerability exists in multiple implementations of DNS resolver libraries (libc and libbind) allows remote attackers who are able to send malicious DNS responses to exploit this vulnerability to execute arbitrary code or cause a denial of service. Most versions of BIND, FreeBSD, NetBSD, and OpenBSD are vulnerable.
| | Homepage: | http://www.cert.org | | File Size: | 11562 | | Last Modified: | Jun 29 20:14:30 2002 |
| MD5 Checksum: | f43e323b7d300233377911efea2586a9 |
|
| /// File Name: |
CA-2002-18.openssh |
Description:
|
CERT Advisory CA-2002-18 - Openssh v2.3.1p1 to 3.3 contains two related vulnerabilities. A vulnerability in the PAM modules that use interactive keyboard authentication (PAMAuthenticationViaKbdInt) can allow remote execution of code. In addition, challenge response configuration option is set to yes and the system is using SKEY or BSD_AUTH, an intruder can execute code remotely.
| | Homepage: | http://www.cert.org | | File Size: | 17273 | | Last Modified: | Jun 29 19:50:09 2002 |
| MD5 Checksum: | 0c96f5bb1420a25e4545fcee7cee3a22 |
|
| /// File Name: |
CA-2002-17.apache |
Description:
|
CERT Advisory CA-2002-17 - Apache v1.3.24 and 2.0.36 and below contains a remotely exploitable vulnerability in chunk encoded data support that is present by default. Remote code execution is possible on some platforms, denial of service attacks are possible against others. Fix available here.
| | Homepage: | http://www.cert.org | | File Size: | 9259 | | Last Modified: | Jun 19 07:49:30 2002 |
| MD5 Checksum: | 33aac8d5526df98677412567f1f82ac3 |
|
| /// File Name: |
CA-2002-08.oracle |
Description:
|
CERT Advisory CA-2002-08 - Multiple vulnerabilities have been discovered in Oracle's "Unbreakable" Application server, including buffer overflows, insecure default settings, failures to enforce access controls, and failure to validate input.
| | Homepage: | http://www.cert.org | | File Size: | 17123 | | Last Modified: | Jun 6 07:54:20 2002 |
| MD5 Checksum: | 0f76675f83d91b4badbdb694ba176a47 |
|
| /// File Name: |
CA-2002-16.yahoo |
Description:
|
CERT Advisory CA-2002-16 - Yahoo! Messenger version 5,0,0,1064 and prior for Microsoft Windows contain multiple vulnerabilities which can be exploited to execute arbitrary code with the privileges of the victim user.
| | Homepage: | http://www.cert.org | | File Size: | 9549 | | Last Modified: | Jun 6 05:03:45 2002 |
| MD5 Checksum: | 01b983276b9dab2470d4c32241d73f0d |
|
| /// File Name: |
CA-2002-15.bind9 |
Description:
|
CERT Advisory CA-2002-15 - Domain Name System (DNS) servers running ISC BIND 9 prior to 9.2.1 are vulnerable to a remote denial of service attack. ISC BIND versions 8 and 4 are not affected. This vulnerability is also being referenced as CAN-2002-0400.
| | Homepage: | http://www.cert.org | | File Size: | 10871 | | Last Modified: | Jun 5 06:41:26 2002 |
| MD5 Checksum: | fcb6c431e493d238ddcf4397636252ae |
|
| /// File Name: |
CA-2002-14.jrun |
Description:
|
CERT Advisory CA-2002-14 - A remotely exploitable buffer overflow in Macromedia JRun v3.0 and 3.1 when running with IIS 4 or 5 allows remote attackers to execute code with SYSTEM privileges. According to Macromedia, JRun is deployed at over 10,000 organizations worldwide.
| | Homepage: | http://www.cert.org | | File Size: | 5071 | | Last Modified: | Jun 3 06:33:35 2002 |
| MD5 Checksum: | c591addd3e41a1868e5f53ddd2c37f3c |
|
| /// File Name: |
CS-2002-02 |
Description:
|
Unavailable.
| | File Size: | 9187 | | Last Modified: | May 29 08:32:14 2002 |
| MD5 Checksum: | a4128a42b18994cc6abd8c451be8bde4 |
|
| /// File Name: |
CA-2002-13.MSN.Chat.control.txt |
Description:
|
CERT Advisory CA-2002-13 - A buffer overflow in the MSN Chat control allows remote attackers to run arbitrary code if a user runs MSN Messenger or Exchange Instant Messenger. It is also possible to exploit this vulnerability via a web site or HTML email. Additional information can be found in the Microsoft bulletin MS02-22.
| | Homepage: | http://www.cert.org | | File Size: | 7931 | | Last Modified: | May 13 03:23:39 2002 |
| MD5 Checksum: | 7f908068e4f7db69361f9a16ecbf85d9 |
|
| /// File Name: |
CA-2002-12-ISC-DHCP |
Description:
|
CERT Advisory CA-2002-12 - A format string vulnerability in ISC DHCP 3 to 3.0.1rc8 can be used to remotely execute code through this application. Because ISC DHCP runs with root privileges, exploitation of this vulnerability can lead to a root compromise.
| | Homepage: | http://www.cert.org | | File Size: | 9193 | | Last Modified: | May 10 07:44:11 2002 |
| MD5 Checksum: | 95cc636e9bbdd703e6ba5a6658603d96 |
|
| /// File Name: |
CA-2002-11.cachefsd |
Description:
|
CERT Advisory CA-2002-11 - Sun's NFS/RPC file system cachefs daemon (cachefsd) installed by default with Sun Solaris 2.5.1, 2.6, 7, and 8, contains a remotely exploitable heap overflow which allows attackers to execute code as root.
| | Homepage: | http://www.cert.org | | File Size: | 7079 | | Last Modified: | May 7 09:36:50 2002 |
| MD5 Checksum: | 842f0179954995b6d4c0f25e885ed5d3 |
|
| /// File Name: |
CA-2002-10.rpc.walld |
Description:
|
CERT Advisory CA-2002-10 - Solaris v2.5.1, 2.6, 2.7, and 2.8 rpc.walld contains a remotely exploitable format string overflow.
| | Homepage: | http://www.cert.org | | File Size: | 6526 | | Last Modified: | May 7 09:33:11 2002 |
| MD5 Checksum: | 4653bcc808b8d76746723c186ffc665c |
|
| /// File Name: |
CA-2002-07.zlib |
Description:
|
CERT Advisory CA-2002-07 - A bug in the zlib compression library prior to v1.1.4 manifests itself as a vulnerability in any of the many programs that are linked with zlib, and allows an attackers to mount a dos attack, gather info, or execute arbitrary code. Passing a specially-crafted block of invalid compressed data to a program that includes zlib, the program's attempt to decompress the crafted data can cause the zlib routines to corrupt the internal data structures. Fix available here. A list of over 500 applications, including ssh and openssh, linked to zlib is here.
| | Homepage: | http://www.cert.org | | File Size: | 15969 | | Last Modified: | Mar 13 05:37:32 2002 |
| MD5 Checksum: | 1a332cb92b45067adbc3e8f20fcee995 |
|
| /// File Name: |
CA-2002-06.radius |
Description:
|
CERT Advisory CA-2002-06 - Multiple remote vulnerabilities have been discovered in several implementations of the RADIUS protocol. One of the bugs is a denial of service which allows attackers to execute arbitrary code if they know the shared secret. Affected systems include: Ascend RADIUS versions 1.16 and prior, Cistron RADIUS versions 1.6.4 and prior, FreeRADIUS versions 0.3 and prior, GnuRADIUS versions 0.95 and prior, ICRADIUS versions 0.18.1 and prior, Livingston RADIUS versions 2.1 and earlier, RADIUS (commonly known as Lucent RADIUS) versions 2.1 and prior, RADIUSClient versions 0.3.1 and prior, YARD RADIUS 1.0.19 and prior, and XTRADIUS 1.1-pre1 and prior.
| | Homepage: | http://www.cert.org | | File Size: | 17830 | | Last Modified: | Mar 6 05:11:57 2002 |
| MD5 Checksum: | c70a071e85c79d3fec92ca46819dab3b |
|
| /// File Name: |
CA-2002-05.php.upload |
Description:
|
CERT Advisory CA-2002-05 - File upload vulnerabilities in php_mime_split allow remote attackers to execute arbitrary code with the privileges of the PHP process in v4.1.1 and below. More information available here. Patch available here.
| | Homepage: | http://www.cert.org | | File Size: | 7777 | | Last Modified: | Feb 28 03:52:42 2002 |
| MD5 Checksum: | 0013da4bfe2284dd9bd31c2fe86d2b62 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
