Top: Advisories

Unix

Windows

• CA-2000-20: Multiple Denial-of-Service Problems in ISC BIND
  The CERT Coordination Center has recently learned of two serious denial-of-service vulnerabilities in the Internet Software Consortium's (ISC) BIND software.
  http://www.cert.org/advisories/CA-2000-20.html
• CA-2000-21: Denial-of-Service Vulnerabilities in TCP/IP Stacks
  A variety of denial-of-service vulnerabilities has been explored and documented by BindView's RAZOR Security Team. These vulnerabilities allow attackers to consume limited resources on victim machines.
  http://www.cert.org/advisories/CA-2000-21.html
• CA-2000-22: Input Validation Problems in LPRng
  A popular replacement software package to the BSD lpd printing service called LPRng contains at least one software defect, known as a "format string vulnerability," which may allow remote users to execute arbitrary code on vulnerable systems.
  http://www.cert.org/advisories/CA-2000-22.html
• CA-2001-01: Interbase Server Contains Compiled-in Back Door Account
  Interbase is an open source database package that had previously been distributed in a closed source fashion by Borland/Inprise. Both the open and closed source verisions of the Interbase server contain a compiled-in back door account with a known password.
  http://www.cert.org/advisories/CA-2001-01.html
• CA-2001-02: Multiple Vulnerabilities in BIND
  Domain Name System (DNS) Servers running various versions of ISC BIND (including both 4.9.x prior to 4.9.8 and 8.2.x prior to 8.2.3; 9.x is not affected) and derivatives. Because the normal operation of most services on the Internet depends on the proper operation of DNS servers, other services could be impacted if these vulnerabilities are exploited.
  http://www.cert.org/advisories/CA-2001-02.html
• CA-2001-03: VBS/OnTheFly (Anna Kournikova) Malicious Code
  "VBS/OnTheFly" is a VBScript program that spreads via email. This malicious code can infect a system if the enclosed attachment is run.
  http://www.cert.org/advisories/CA-2001-03.html
• CA-2001-04: Unauthentic
  On January 29 and 30, 2001, VeriSign, Inc. issues two certificates to an individual fraudulently claiming to be an employee of Microsoft Corporation. Any code signed by these certificates will appear to be legitimately signed by Microsoft when, in fact, it is not. Once accepted, these certificates may allow an attacker to execute malicious code on the user's system.
  http://www.cert.org/advisories/CA-2001-04.html
• CA-2001-05: Exploitation of snmpXdmid
  The CERT/CC has received numerous reports indicating that a vulnerability in snmpXdmid is being actively exploited. Exploitation of this vulnerability allows an intruder to gain privileged (root) access to the system.
  http://www.cert.org/advisories/CA-2001-05.html
• CA-2001-07: File Globbing Vulnerabilities in Various FTP Servers
  Several File Transfer Protocol (FTP) servers incorrectly manage buffers in a way that can lead to remote intruders executing arbitrary code on the FTP server.
  http://www.cert.org/advisories/CA-2001-07.html
• CA-2001-08: Multiple Vulnerabilities in Alcatel ADSL Modems
  The San Diego Supercomputer Center (SDSC) has recently discovered several vulnerabilities in the Alcatel Speed Touch Asymmetric Digital Subscriber Line (ADSL) modem.
  http://www.cert.org/advisories/CA-2001-08.html

[ 1 2 3 4 ]