Section: .. / advisories / cert /
|
See the CERT website for more information.
|
| /// File Name: |
CA-2002-21.php |
Description:
|
CERT Advisory CA-2002-21 - Another file upload vulnerability has been discovered in PHP which can allow remote code execution. X86 systems are difficult to remotely execute code on but can still be crashed.
| | Homepage: | http://www.cert.org | | File Size: | 11397 | | Last Modified: | Jul 23 19:31:52 2002 |
| MD5 Checksum: | e6a875b4bd735f98cafc7f3932823ebd |
|
| /// File Name: |
CA-93:08.SCO.passwd.vulnerability |
Description:
|
A vulnerability exists in several releases of SCO's Operating Systems. This vulnerability has the potential to deny legitimate users the ability to log onto the system. This advisory details information about releases available to correct this problem.
| | File Size: | 11301 | | Last Modified: | Sep 14 07:47:27 1999 |
| MD5 Checksum: | b8632fa408d40ffd51ccb32ca25fe724 |
|
| /// File Name: |
y2k-virus.htm |
Description:
|
Year 2000 Computer Viruses and Hoaxes - List of the approximate number of reports the CERT/CC has received on viruses and hoaxes that reference Y2K. There are also links to anti-virus vendors having Y2K virus and hoax web pages.
| | File Size: | 11273 | | Last Modified: | Dec 18 08:27:32 1999 |
| MD5 Checksum: | 6df1296947e7115ebc355c8791f60c7c |
|
| /// File Name: |
CA-98.02.CDE |
Description:
|
This advisory reports several vulnerabilities in some implementations of the Common Desktop Environment (CDE).
| | File Size: | 11239 | | Last Modified: | Sep 14 07:49:53 1999 |
| MD5 Checksum: | 1715e2d5702647b8e0af1ae91c5f246e |
|
| /// File Name: |
CA-2002-36.ssh |
Description:
|
CERT Advisory CA-2002-36 - Multiple vendors' implementations of the secure shell (SSH) transport layer protocol contain vulnerabilities that could allow a remote attacker to execute arbitrary code with the privileges of the SSH process or cause a denial of service. The vulnerabilities affect SSH clients and servers, and they occur before user authentication takes place. OpenSSH is not vulnerable. More information available here.
| | Homepage: | http://www.cert.org | | File Size: | 11191 | | Last Modified: | Dec 21 11:23:09 2002 |
| MD5 Checksum: | 393e90df79d2e0d58203125c9bb58ff0 |
|
| /// File Name: |
CA-97.13.xlock |
Description:
|
This advisory reports a buffer overflow problem in some versions of xlock. This problem makes it possible for local users to execute arbitrary programs as a privileged user. Patch information and a workaround are included.
| | File Size: | 11188 | | Last Modified: | Sep 14 07:49:26 1999 |
| MD5 Checksum: | 0f0ae0fdc12663da8b6527d6e842aa6e |
|
| /// File Name: |
CA-2000-09.pgp |
Description:
|
CERT Advisory CA-2000-09 - Flaw in PGP 5.0 Key Generation. UNIX systems having a /dev/random device running any version of PGP 5.0 are affected. When keys are generated non-interactively and without user-added randomness, on some systems PGP v5.0 generates keys that are not random enough, allowing an attacker to predict keys and therefore recover information encrypted with that key. Additionally, an attacker may be able to forge a digital signature corresponding to a vulnerable key. CERT homepage here.
| | File Size: | 11133 | | Last Modified: | May 31 06:29:20 2000 |
| MD5 Checksum: | 8429f133ed63058392165435c075a58c |
|
| /// File Name: |
packet_filtering.htm |
Description:
|
CERT FAQ on which ports you should block at your firewall / router.
| | Homepage: | http://www.cert.org/tech_tips/ | | File Size: | 11089 | | Last Modified: | Feb 7 21:00:20 2000 |
| MD5 Checksum: | 5e3002575a2c4265fe9430b4898f608c |
|
| /// File Name: |
CA-99.13.wu-ftpd |
Description:
|
CERT Advisory CA-99-13 Multiple Vulnerabilities in WU-FTPD. Vulnerability #1: MAPPING_CHDIR Buffer Overflow, Vulnerability #2: Message File Buffer Overflow, Vulnerability #3: SITE NEWER Consumes Memory. www.cert.org
| | File Size: | 11018 | | Last Modified: | Oct 21 00:46:16 1999 |
| MD5 Checksum: | 7d55572971baaa860df87f625b3594e5 |
|
| /// File Name: |
CA-2000-05.dns |
Description:
|
There are continuing compromises of machines running the Domain Name System (DNS) server software that is part of BIND ("named"), including compromises of machines that are not being used as DNS Servers.
| | Homepage: | http://www.ciac.org/ciac/bulletins/k-036.shtml | | File Size: | 10978 | | Last Modified: | May 2 23:01:30 2000 |
| MD5 Checksum: | 9fc310fe57b28cf58bcd938e7be80ccd |
|
| /// File Name: |
CA-95:15.SGI.lp.vul |
Description:
|
This advisory points out accounts that are distributed without passwords and urges SGI customers to create passwords for those accounts.
| | File Size: | 10923 | | Last Modified: | Sep 14 07:48:38 1999 |
| MD5 Checksum: | d71b2dbd6f3758ceb50ca382bd593960 |
|
| /// File Name: |
CA-2002-15.bind9 |
Description:
|
CERT Advisory CA-2002-15 - Domain Name System (DNS) servers running ISC BIND 9 prior to 9.2.1 are vulnerable to a remote denial of service attack. ISC BIND versions 8 and 4 are not affected. This vulnerability is also being referenced as CAN-2002-0400.
| | Homepage: | http://www.cert.org | | File Size: | 10871 | | Last Modified: | Jun 5 06:41:26 2002 |
| MD5 Checksum: | fcb6c431e493d238ddcf4397636252ae |
|
| /// File Name: |
CA-96.03.kerberos_4_key_server |
Description:
|
This advisory describes a problem with the Kerberos 4 key server, points to patches, and provides vendor information.
| | File Size: | 10840 | | Last Modified: | Sep 14 07:48:43 1999 |
| MD5 Checksum: | 2d2b8d87bd0cf809d613af6612b08bad |
|
| /// File Name: |
CA-97.07.nph-test-cgi_script |
Description:
|
This advisory points out a vulnerability in the nph-test-cgi script included with some http daemons. Readers are urged to disable the script. Vendor information is included.
| | File Size: | 10822 | | Last Modified: | Sep 14 07:49:20 1999 |
| MD5 Checksum: | 0c25a7d99a5d9e71a2ee5425339b407f |
|
| /// File Name: |
CA-96.22.bash_vuls |
Description:
|
This advisory addresses two problems with the GNU Project's Bourne Again SHell (bash): one in yy_string_get() and one in yy_readline_get().
| | File Size: | 10780 | | Last Modified: | Sep 14 07:49:06 1999 |
| MD5 Checksum: | 8faa3d5f2ef45f3d52ac8cc1473ecce1 |
|
| /// File Name: |
CA-2000-16.ie |
Description:
|
CERT Advisory CA-2000-16 - Internet Explorer can open Microsoft Access database or project files containing malicious code and execute the code without giving a user prior warning. Access files that are referenced by OBJECT tags in HTML documents can allow attackers to execute arbitrary commands using Visual Basic for Applications (VBA) or macros. A remote intruder can send malicious HTML via an email message, newsgroup posting, or downloaded Web page and may be able to execute arbitrary code on a victim machine.
| | Homepage: | http://www.cert.org | | File Size: | 10726 | | Last Modified: | Aug 12 01:24:28 2000 |
| MD5 Checksum: | 60c8a5ded6fbc559e74931a39ff620ac |
|
| /// File Name: |
CA-99-05-statd-automountd.txt |
Description:
|
This advisory describes two vulnerabilities that are being used together by intruders to gain access to vulnerable systems.
| | File Size: | 10710 | | Last Modified: | Sep 14 07:50:10 1999 |
| MD5 Checksum: | 15afb436352f30514d73d69c58f31316 |
|
| /// File Name: |
CA-2002-27.sslworm |
Description:
|
Cert Advisory CA-2002-27 - Linux systems running Apache with mod_ssl accessing SSLv2-enabled OpenSSL 0.9.6d or earlier on Intel x86 architectures are being automatically exploited by a worm which takes advantage of VU#102795 in OpenSSL. The worm scans for vulnerable systems on port 80, then sends exploit code over port 443. The worm also functions as a ddos network which communicates over TCP port 2002. Infected systems can be identified by the presence of /tmp/.bugtraq.c. Fix available here.
| | Homepage: | http://www.cert.org | | File Size: | 10709 | | Last Modified: | Sep 16 08:49:18 2002 |
| MD5 Checksum: | b9252e793f07959aadcae76697f1158f |
|
| /// File Name: |
CA-97.19.bsdlp |
Description:
|
This advisory describes a vulnerability in BSD-based lpr printing software. Vendor information and a pointer to a wrapper are included.
| | File Size: | 10640 | | Last Modified: | Sep 14 07:49:38 1999 |
| MD5 Checksum: | 404732293e68bd9b18964f1e1cd8e95a |
|
| /// File Name: |
CA-2003-01.dhcpd |
Description:
|
CERT Advisory CA-2003-01 - There are multiple stack-based buffer overflows in ISC DHCP that are exploitable by sending a DHCP message containing a large hostname value allowing remote attackers to execute code with the privileges of the user running dhcpd.
| | Homepage: | http://www.cert.org | | File Size: | 10570 | | Related CVE(s): | CAN-2003-0026 | | Last Modified: | Jan 17 09:24:05 2003 |
| MD5 Checksum: | d17c624c49bad511e5dac22b8cce69a6 |
|
| /// File Name: |
CA-99-14.bind |
Description:
|
Six vulnerabilities have been found in BIND, the popular domain name server from the Internet Software Consortium (ISC). One of these vulnerabilities may allow remote intruders to gain privileged access to name servers. www.cert.org
| | File Size: | 10342 | | Last Modified: | Nov 11 21:38:10 1999 |
| MD5 Checksum: | 98ae15f05b567c12daba3a7669412f0f |
|
| /// File Name: |
CA-2001-03.OnTheFly |
Description:
|
CERT Advisory CA-2001-03 - The "VBS/OnTheFly" malicious code is a VBScript virus that spreads via email to users of Microsoft Outlook who have not applied previously available security updates. When the malicious code executes, it attempts to send copies of itself, using Microsoft Outlook, to all entries in each of the address books. Outlook update available here. Document on Outlook security here.
| | Homepage: | http://www.cert.org | | File Size: | 10331 | | Last Modified: | Feb 14 08:32:20 2001 |
| MD5 Checksum: | 4eed8c06b6d60117b802ac95697fb8d9 |
|
| /// File Name: |
CA-97.02.hp_newgrp |
Description:
|
This advisory describes a vulnerability in the newgrp(1) program under HP-UX 9.x and 10.x that may allow users to gain root privileges. A workaround is provided.
| | File Size: | 10088 | | Last Modified: | Sep 14 07:49:15 1999 |
| MD5 Checksum: | 4e9fd81a8b10694c8b297e408aead7cf |
|
| /// File Name: |
CA-97.12.webdist |
Description:
|
This advisory reports a vulnerability in the webdist.cgi-bin program, part of the IRIX Mindshare Out Box package, available with IRIX 5.x and 6.x. When exploiting this vulnerability, both local and remote users may be able to execute arbitrary commands with the privileges of the httpd daemon. A workaround is included.
| | File Size: | 10050 | | Last Modified: | Sep 14 07:49:25 1999 |
| MD5 Checksum: | b49eca1d205428b04a7c6e84a8823a02 |
|
| /// File Name: |
CA-95:02.binmail.vulnerabilities |
Description:
|
** This advisory supersedes CA-91:01a and CA-91:13. ** It addresses vulnerabilities in some versions of /bin/mail based on BSD 4.3 UNIX. It includes a list of vendor patches and source code for mail.local.c, an alternative to /bin/mail.
| | File Size: | 10040 | | Last Modified: | Sep 14 07:48:08 1999 |
| MD5 Checksum: | 43436de334513164d7545cf804ca6a7d |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
