pacnog March 2009

pacnog@pacnog.org

9 participants
12 discussions

by noreply＠apnic.net

Dear Subscriber, This is the monthly reminder of subscription information for the pacnog list, hosted at APNIC. For subscription information including how to un-subscribe go to http://mailman.apnic.net/mailman/listinfo/pacnog Thank you for participating in this discussion. Kind Regards, List administrator

13 years, 3 months

ComFone

by Aloiamoa Anesi

Hey All, I seem to remember someone mentioning at one of the PACNOG meetings that they were using ComFone, but I'm not sure. We're looking into deploying this, so I was wondering if any you had used it or deployed it in your network. Thanks, Alo ------------------------------------------------------- Aloiamoa Anesi, Jr. Systems Engineer Blue Sky Communications 478 Laufou Shopping Ctr Pago Pago, American Samoa 96799 -- Ph: +1.684.699.2759 ext 1098 Cell: +1.684.258.1098 VoIP Business Hours: 1098(a)voip.bluesky.as

13 years, 3 months

Re: [pacnog] Conficker C - Scanning (remote detection) tool available

by Scott Weeks

Whew, I always worry about missing something obvious when posting to a list... :-) Thanks for the clarification! scott --- richard(a)auscert.org.au wrote: From: Richard Billington <richard(a)auscert.org.au> I think it is ME who needs that coffee! It should of course read: "Nmap has released a new (beta) release that enables _*you to detect*_ Conficker infections just by scanning the network." --------------------------------------- > Maybe it's just me, but this makes it seem as if you can infect machines with Conficker by scanning the network with > NMap. > > "Nmap has released a new (beta) release that enables > Conficker infections just by scanning the network." > > Do I just need more coffee? :-) > > scott > > > > --- richard(a)auscert.org.au wrote: > > From: Richard Billington <richard(a)auscert.org.au> > To: pacnog(a)pacnog.org > Subject: [pacnog] Conficker C - Scanning (remote detection) tool available > Date: Tue, 31 Mar 2009 10:09:55 +1000 > > Hi Teams, > > If any of you haven't seen, researchers have found that Conficker leaves a > fingerprint because of how it changes the Windows network stack. This > fingerprint can be checked for with tools such as nmap. > > Nmap has released a new (beta) release that enables Conficker infections > just by scanning the network. > > For more information (including commands for Conficker scanning) see: > http://insecure.org/ > > An original tool (before it was added into nmap) is also available: > http://iv.cs.uni-bonn.de/uploads/media/scs.zip > > And further info can be found at these sites: > http://www.honeynet.org/ > (https://www.honeynet.org/node/389) > http://iv.cs.uni-bonn.de/wg/cs/applications/containing-conficker/ > > Happy Scanning > > Regards, > Richard > > -- > Security Analyst | Hotline: +61 7 3365 4417 > AusCERT | Fax: +61 7 3365 7031 > Australia's National CERT | WWW: www.auscert.org.au > Brisbane QLD Australia | Email: auscert(a)auscert.org.au > _______________________________________________ > pacnog mailing list > pacnog(a)pacnog.org > http://mailman.apnic.net/mailman/listinfo/pacnog > > _______________________________________________ pacnog mailing list pacnog(a)pacnog.org http://mailman.apnic.net/mailman/listinfo/pacnog

13 years, 3 months

Re: [pacnog] Conficker C - Scanning (remote detection) tool available

by Scott Weeks

Hello, Maybe it's just me, but this makes it seem as if you can infect machines with Conficker by scanning the network with NMap. "Nmap has released a new (beta) release that enables Conficker infections just by scanning the network." Do I just need more coffee? :-) scott --- richard(a)auscert.org.au wrote: From: Richard Billington <richard(a)auscert.org.au> To: pacnog(a)pacnog.org Subject: [pacnog] Conficker C - Scanning (remote detection) tool available Date: Tue, 31 Mar 2009 10:09:55 +1000 Hi Teams, If any of you haven't seen, researchers have found that Conficker leaves a fingerprint because of how it changes the Windows network stack. This fingerprint can be checked for with tools such as nmap. Nmap has released a new (beta) release that enables Conficker infections just by scanning the network. For more information (including commands for Conficker scanning) see: http://insecure.org/ An original tool (before it was added into nmap) is also available: http://iv.cs.uni-bonn.de/uploads/media/scs.zip And further info can be found at these sites: http://www.honeynet.org/ (https://www.honeynet.org/node/389) http://iv.cs.uni-bonn.de/wg/cs/applications/containing-conficker/ Happy Scanning Regards, Richard -- Security Analyst | Hotline: +61 7 3365 4417 AusCERT | Fax: +61 7 3365 7031 Australia's National CERT | WWW: www.auscert.org.au Brisbane QLD Australia | Email: auscert(a)auscert.org.au _______________________________________________ pacnog mailing list pacnog(a)pacnog.org http://mailman.apnic.net/mailman/listinfo/pacnog

13 years, 3 months

Conficker C - Scanning (remote detection) tool available

by Richard Billington

Hi Teams, If any of you haven't seen, researchers have found that Conficker leaves a fingerprint because of how it changes the Windows network stack. This fingerprint can be checked for with tools such as nmap. Nmap has released a new (beta) release that enables Conficker infections just by scanning the network. For more information (including commands for Conficker scanning) see: http://insecure.org/ An original tool (before it was added into nmap) is also available: http://iv.cs.uni-bonn.de/uploads/media/scs.zip And further info can be found at these sites: http://www.honeynet.org/ (https://www.honeynet.org/node/389) http://iv.cs.uni-bonn.de/wg/cs/applications/containing-conficker/ Happy Scanning Regards, Richard -- Security Analyst | Hotline: +61 7 3365 4417 AusCERT | Fax: +61 7 3365 7031 Australia's National CERT | WWW: www.auscert.org.au Brisbane QLD Australia | Email: auscert(a)auscert.org.au

13 years, 3 months

AusCERT Week in Review - Week Ending 27/03/2009 (AUSCERT#20073f686)

by Patrick Mannion

Alerts, Advisories and Updates: ------------------------------- Title: AA-2009.0063 -- [Win][UNIX/Linux] -- Two vulnerabilities patched in phpMyAdmin Date: 27 March 2009 URL: http://www.auscert.org.au/10686 Title: AA-2009.0066 -- [Win][UNIX/Linux] -- OpenSSL: Multiple vulnerabilities Date: 27 March 2009 URL: http://www.auscert.org.au/10708 Title: AA-2009.0067 -- [Win][Netware][Linux][Solaris][AIX] -- eDirectory: Hotfix available to correct a security vulnerability Date: 27 March 2009 URL: http://www.auscert.org.au/10709 Title: AL-2009.0022 -- [Win] -- IBM Access Support ActiveX Control: Execute Arbitrary Code Date: 27 March 2009 URL: http://www.auscert.org.au/10710 Title: AA-2009.0068 -- [Win][Netware][Linux] -- ZENworks: information disclosure vulnerability Date: 27 March 2009 URL: http://www.auscert.org.au/10711 Title: AA-2009.0064 -- [Win] -- Unauthorized read access vulnerability in IBM Rational AppScan Enterprise Date: 26 March 2009 URL: http://www.auscert.org.au/10689 Title: AL-2009.0021 -- [Win] -- Update on Conficker as April 2009 activation date approaches Date: 26 March 2009 URL: http://www.auscert.org.au/10702 Title: AA-2009.0065 -- [Win] -- Novell - vulnerabilities patched in Client for Windows 4.8 and 4.9 Date: 26 March 2009 URL: http://www.auscert.org.au/10703 Title: AL-2009.0018 -- [Win][UNIX/Linux] -- Critical update for Adobe Reader 9 and Acrobat 9 Date: 25 March 2009 URL: http://www.auscert.org.au/10621 Title: AA-2009.0062 -- [Win][UNIX/Linux] -- HTTP Response Splitting and file inclusion vulnerability in phpMyAdmin Date: 25 March 2009 URL: http://www.auscert.org.au/10684 Title: AU-2009.0012 -- AusCERT Update - [Win][Linux][HP-UX][Solaris] - HPSBMA02338 SSRT080024, SSRT080041 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS) Date: 24 March 2009 URL: http://www.auscert.org.au/10677 Title: AA-2009.0061 -- [Win][UNIX/Linux] -- New versions of PostgreSQL released Date: 24 March 2009 URL: http://www.auscert.org.au/10681 Title: AA-2008.0259 -- [Win][UNIX/Linux] -- phpBB version 3.0.4 has been released correcting two vulnerabilities Date: 23 March 2009 URL: http://www.auscert.org.au/10221 Title: AA-2009.0059 -- [Win][UNIX/Linux] -- Possible application source file exposure in IBM WebSphere Application Server Date: 23 March 2009 URL: http://www.auscert.org.au/10650 Title: AA-2009.0060 -- [Win][UNIX/Linux] -- TikiWiki 2.3 released Date: 23 March 2009 URL: http://www.auscert.org.au/10672 External Security Bulletins: ---------------------------- Title: ESB-2008.1111 -- [Win][UNIX/Linux] -- Multiple vulnerabilities and weaknesses were discovered in Drupal Date: 26 March 2009 OS: HP Tru64 UNIX, Solaris, IRIX, OpenBSD, Other BSD Variants, FreeBSD, HP-UX, Ubuntu, Debian GNU/Linux, Other Linux Variants, Red Hat Linux, AIX, Server 2008, Windows Vista, Windows 2003, Windows 2000, Windows XP, Mac OS X URL: http://www.auscert.org.au/10192 Title: ESB-2008.0592 -- [Win][Linux][HP-UX][Solaris] -- HPSBMA02338 SSRT080024, SSRT080041 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS) Date: 23 March 2009 OS: HP Tru64 UNIX, Solaris, IRIX, OpenBSD, Other BSD Variants, FreeBSD, HP-UX, Ubuntu, Debian GNU/Linux, Other Linux Variants, Red Hat Linux, AIX, Server 2008, Windows Vista, Windows 2003, Windows 2000, Windows XP, Mac OS X URL: http://www.auscert.org.au/9420 Title: ESB-2009.0288 -- [RedHat] -- NetworkManager: Moderate security update Date: 27 March 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/10707 Title: ESB-2009.0287 -- [Debian] -- Iceweasel: End-of-life announcement in Debian 4.0 Date: 27 March 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10706 Title: ESB-2009.0286 -- [RedHat] -- acroread: Critical security update Date: 26 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10705 Title: ESB-2009.0285 -- [Linux][Debian] -- systemtap: New packages fix local privilege escalation Date: 27 March 2009 OS: Red Hat Linux, Other Linux Variants, Debian GNU/Linux, Ubuntu URL: http://www.auscert.org.au/10704 Title: ESB-2009.0284 -- [UNIX/Linux][Debian] -- New lcms packages fix regression Date: 26 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10701 Title: ESB-2009.0283 -- [Cisco] -- Multiple Cisco IOS Vulnerabilities Date: 26 March 2009 OS: Cisco Products URL: http://www.auscert.org.au/10700 Title: ESB-2009.0282 -- [Win][UNIX/Linux][RedHat][Solaris] -- Critical: java-1.6.0-ibm security update Date: 26 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10699 Title: ESB-2009.0281 -- [Win][Linux][Solaris] -- Multiple vulnerabilities in Java Runtime Environment (JRE) Date: 27 March 2009 OS: Windows Vista, Red Hat Linux, Server 2008, Windows XP, Other Linux Variants, Windows 2000, Windows 2003, Debian GNU/Linux, Ubuntu, Solaris URL: http://www.auscert.org.au/10698 Title: ESB-2009.0280 -- [Win][Linux][Solaris] -- Security Vulnerabilities in the Java Runtime Environment (JRE) With Storing and Processing Font Files May Allow Denial of Service (DOS) Date: 27 March 2009 OS: Windows Vista, Red Hat Linux, Server 2008, Windows XP, Other Linux Variants, Windows 2000, Windows 2003, Debian GNU/Linux, Ubuntu, Solaris URL: http://www.auscert.org.au/10697 Title: ESB-2009.0279 -- [Win][Linux][Solaris] -- A Security Vulnerability in the Java Runtime Environment (JRE) HTTP Server Implementation May Allow a Denial of Service (DoS) Condition on a JAX-WS Service Endpoint Date: 27 March 2009 OS: Windows Vista, Red Hat Linux, Server 2008, Windows XP, Other Linux Variants, Windows 2000, Windows 2003, Debian GNU/Linux, Ubuntu, Solaris URL: http://www.auscert.org.au/10693 Title: ESB-2009.0278 -- [Win][Linux][Solaris] -- Integer and Buffer Overflow Vulnerabilities in the Java Runtime Environment (JRE) "unpack200" JAR Unpacking Utility May Lead to Escalation of Privileges Date: 27 March 2009 OS: Windows Vista, Red Hat Linux, Server 2008, Windows XP, Other Linux Variants, Windows 2000, Windows 2003, Debian GNU/Linux, Ubuntu, Solaris URL: http://www.auscert.org.au/10692 Title: ESB-2009.0277 -- [Win][Linux][Solaris] -- Multiple Security Vulnerabilities in Java Plug-in May Allow Privileges to be Escalated Date: 27 March 2009 OS: Windows Vista, Red Hat Linux, Server 2008, Windows XP, Other Linux Variants, Windows 2000, Windows 2003, Debian GNU/Linux, Ubuntu, Solaris URL: http://www.auscert.org.au/10691 Title: ESB-2009.0276 -- [Solaris] -- A Security Vulnerability in the Java Runtime Environment (JRE) Virtual Machine With Code Generation May Allow Escalation of Privileges Date: 27 March 2009 OS: Solaris URL: http://www.auscert.org.au/10690 Title: ESB-2009.0275 -- [Solaris] -- Multiple Security Vulnerabilities in the Adobe Flash Player for Solaris 10 Date: 25 March 2009 OS: Solaris URL: http://www.auscert.org.au/10688 Title: ESB-2009.0274 -- [RedHat] -- Moderate: thunderbird security update Date: 25 March 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/10687 Title: ESB-2009.0273 -- [RedHat] -- Moderate: glib2 security update Date: 25 March 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/10685 Title: ESB-2009.0272 -- [Win][Linux][HP-UX][Solaris] -- HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code Date: 25 March 2009 OS: Solaris, Ubuntu, Debian GNU/Linux, Windows 2003, Windows 2000, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, HP-UX, Windows Vista URL: http://www.auscert.org.au/10683 Title: ESB-2009.0271 -- [HP-UX] -- HP-UX Running VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm), Local Escalation of Privilege Date: 25 March 2009 OS: HP-UX URL: http://www.auscert.org.au/10682 Title: ESB-2009.0270 -- [UNIX/Linux] -- A security vulnerability has been identified and fixed in pam Date: 24 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10680 Title: ESB-2009.0269 -- [Win][UNIX/Linux] -- Sun Java System Identity Manager Security Vulnerabilities Date: 27 March 2009 OS: Windows Vista, AIX, HP-UX, Mac OS X, Red Hat Linux, Server 2008, Windows XP, Other Linux Variants, FreeBSD, Windows 2000, OpenBSD, Windows 2003, IRIX, Other BSD Variants, Debian GNU/Linux, Ubuntu, HP Tru64 UNIX, Solaris URL: http://www.auscert.org.au/10679 Title: ESB-2009.0268 -- [UNIX/Linux][Debian] -- New webcit packages fix potential remote code execution Date: 24 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10678 Title: ESB-2009.0267 -- [Win][UNIX/Linux] -- BIND 9.5.1-P2 and 9.4.3-P2 are now available Date: 24 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10676 Title: ESB-2009.0266 -- [Win][UNIX/Linux] -- Vulnerabilities identified in Printer, e-mail and PDF versions, and Content Construction Kit (Drupal third-party modules) Date: 25 March 2009 OS: Windows Vista, AIX, HP-UX, Mac OS X, Red Hat Linux, Server 2008, Windows XP, Other Linux Variants, FreeBSD, Windows 2000, OpenBSD, Windows 2003, IRIX, Other BSD Variants, Debian GNU/Linux, Ubuntu, HP Tru64 UNIX, Solaris URL: http://www.auscert.org.au/10675 Title: ESB-2009.0265 -- [Win][RedHat][OSX] -- Symantec pcAnywhere Format String Denial of Service Date: 23 March 2009 OS: Windows 2003, Windows 2000, Windows XP, Server 2008, Red Hat Linux, Mac OS X, Windows Vista URL: http://www.auscert.org.au/10674 Title: ESB-2009.0264 -- [Debian] -- New glib2.0 packages fix arbitrary code execution Date: 23 March 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10673 Title: ESB-2009.0263 -- [Debian] -- New Linux 2.6.26 packages fix several vulnerabilities Date: 23 March 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10671 Title: ESB-2009.0262 -- [UNIX/Linux][Debian] -- New xulrunner packages fix several vulnerabilities Date: 23 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10670 Title: ESB-2009.0261 -- [UNIX/Linux][FreeBSD] -- Local privilege escalation Date: 23 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10669 Title: ESB-2009.0260 -- [Debian] -- New libpng packages fix several vulnerabilities Date: 23 March 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10668 Title: ESB-2009.0251 -- [UNIX/Linux][Ubuntu] -- GLib vulnerability Date: 25 March 2009 OS: AIX, HP-UX, Mac OS X, Red Hat Linux, Other Linux Variants, FreeBSD, OpenBSD, IRIX, Other BSD Variants, Debian GNU/Linux, Ubuntu, HP Tru64 UNIX, Solaris URL: http://www.auscert.org.au/10656 Title: ESB-2009.0027 -- [Win][UNIX/Linux] -- Openfire multiple vulnerabilities Date: 24 March 2009 OS: Windows Vista, AIX, HP-UX, Mac OS X, Red Hat Linux, Server 2008, Windows XP, Other Linux Variants, FreeBSD, Windows 2000, OpenBSD, Windows 2003, IRIX, Other BSD Variants, Debian GNU/Linux, Ubuntu, HP Tru64 UNIX, Solaris URL: http://www.auscert.org.au/10320 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ===========================================================================

13 years, 3 months

AusCERT Week in Review - Week Ending 20/03/2009 (AUSCERT#20073f686)

by Paul Fahey

Alerts, Advisories and Updates: ------------------------------- Title: AL-2009.0020 -- [Win][UNIX/Linux] -- Symantec Products Update Vulnerable Autonomy KeyView Module Date: 18 March 2009 URL: http://www.auscert.org.au/10659 Title: AA-2009.0059 -- [Win][UNIX/Linux] -- Possible application source file exposure in IBM WebSphere Application Server Date: 16 March 2009 URL: http://www.auscert.org.au/10650 External Security Bulletins: ---------------------------- Title: ESB-2009.0259 -- [UNIX/Linux][RedHat] -- Moderate: ghostscript security update Date: 20 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10666 Title: ESB-2009.0258 -- [RedHat] -- Moderate: curl security update Date: 20 March 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/10665 Title: ESB-2009.0257 -- [UNIX/Linux][RedHat] -- Moderate: lcms security update Date: 20 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10664 Title: ESB-2009.0256 -- [UNIX/Linux][RedHat] -- Moderate: libvirt security update Date: 20 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10663 Title: ESB-2009.0255 -- [Ubuntu] -- NSS vulnerability Date: 19 March 2009 OS: Ubuntu URL: http://www.auscert.org.au/10662 Title: ESB-2009.0254 -- [UNIX/Linux][Debian] -- New weechat packages fix denial of service Date: 19 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10661 Title: ESB-2009.0253 -- [Win][UNIX/Linux] -- A vulnerability has been identified in Tasklist (Drupal third-party module) Date: 19 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10660 Title: ESB-2009.0252 -- [Win][UNIX/Linux][Ubuntu] -- GStreamer Base Plugins vulnerability Date: 18 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10657 Title: ESB-2009.0251 -- [UNIX/Linux][Ubuntu] -- GLib vulnerability Date: 18 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10656 Title: ESB-2009.0250 -- [Solaris] -- A Security Vulnerability in Kerberos Incremental Propagation May Lead to a Denial of Service (DoS) Against Slave KDC Systems Date: 18 March 2009 OS: Solaris URL: http://www.auscert.org.au/10655 Title: ESB-2009.0249 -- [Solaris] -- Security Vulnerabilities in the UFS File System Date: 18 March 2009 OS: Solaris URL: http://www.auscert.org.au/10654 Title: ESB-2009.0248 -- [UNIX/Linux][RedHat] -- Moderate: libsoup security update Date: 17 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10653 Title: ESB-2009.0247 -- [UNIX/Linux][RedHat] -- Moderate: evolution security updates Date: 17 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10652 Title: ESB-2009.0246 -- [UNIX/Linux] -- A vulnerability has been discovered in avahi Date: 17 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10651 Title: ESB-2009.0245 -- [Win][UNIX/Linux][Debian] -- New yaws packages fix denial of service Date: 16 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10649 Title: ESB-2009.0244 -- [Debian] -- New libsnd packages fix arbitrary code execution Date: 16 March 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10648 Title: ESB-2009.0243 -- [Solaris] -- Security Vulnerability in the Solaris keysock Date: 16 March 2009 OS: Solaris URL: http://www.auscert.org.au/10647 Title: ESB-2009.0242 -- [Win][Linux][OSX] -- New psi (Jabber client) packages fix denial of service Date: 16 March 2009 OS: Ubuntu, Debian GNU/Linux, Windows 2003, Windows 2000, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, Mac OS X, Windows Vista URL: http://www.auscert.org.au/10646 Title: ESB-2009.0241 -- [Win][UNIX/Linux][Debian] -- New mldonkey packages fix information disclosure Date: 16 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10645 Title: ESB-2009.0231 -- [Solaris] -- Multiple Security Issues in the Doors Kernel Functionality Date: 16 March 2009 OS: Solaris URL: http://www.auscert.org.au/10631 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ===========================================================================

13 years, 3 months

AusCERT Week in Review - Week Ending 13/03/2009 (AUSCERT#20073f686)

by Zane Jarvis

Alerts, Advisories and Updates: ------------------------------- Title: AA-2009.0054 -- [Win] -- A vulnerability has been identified in IBM Tivoli Storage Manager HSM for Windows client Date: 13 March 2009 URL: http://www.auscert.org.au/10616 Title: AL-2009.0019 -- [Win][Netware][UNIX/Linux] -- Radiator 4.4 released fixing a number of vulnerabilities Date: 13 March 2009 URL: http://www.auscert.org.au/10642 Title: AA-2009.0057 -- [Win][Linux][HP-UX][Solaris][AIX] -- A vulnerability has been identified in IBM WebSphere Process Server Date: 12 March 2009 URL: http://www.auscert.org.au/10638 Title: AL-2009.0017 -- [Win] -- Vulnerabilities in Windows Kernel Could Allow Remote Code Execution Date: 11 March 2009 URL: http://www.auscert.org.au/10617 Title: AL-2009.0018 -- [Win][UNIX/Linux] -- Critical update for Adobe Reader 9 and Acrobat 9 Date: 11 March 2009 URL: http://www.auscert.org.au/10621 Title: AA-2009.0055 -- [OpenBSD] -- A vulnerability has been identified in bgpd Date: 11 March 2009 URL: http://www.auscert.org.au/10629 Title: AA-2009.0056 -- [Win][UNIX/Linux] -- A vulnerability has been identified in MySQL Date: 11 March 2009 URL: http://www.auscert.org.au/10630 Title: AA-2009.0053 -- [Win] -- Foxit Reader - Multiple vulnerabilities corrected in new release Date: 10 March 2009 URL: http://www.auscert.org.au/10609 Title: AL-2009.0016 -- [Win] -- Microsoft Bulletin Notification - March Pre-release Announcement Date: 10 March 2009 URL: http://www.auscert.org.au/10611 External Security Bulletins: ---------------------------- Title: ESB-2009.0240 -- [Ubuntu] -- curl regression Date: 13 March 2009 OS: Ubuntu URL: http://www.auscert.org.au/10641 Title: ESB-2009.0239 -- [RedHat] -- Important: kernel security and bug fix update Date: 13 March 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/10640 Title: ESB-2009.0238 -- [UNIX/Linux][RedHat] -- Moderate: icu security update Date: 13 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10639 Title: ESB-2009.0237 -- [Win][UNIX/Linux] -- A vulnerability has been identified in Forward (Drupal module) Date: 12 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10637 Title: ESB-2009.0236 -- [Win][Mac][OSX] -- iTunes 8.1 has been released to correct a number of vulnerabilities Date: 12 March 2009 OS: Windows 2003, Windows 2000, Windows XP, Server 2008, Mac OS X, Windows Vista URL: http://www.auscert.org.au/10636 Title: ESB-2009.0235 -- [Win] -- WMI Mapper for HP Systems Insight Manager Running on Windows, Remote Unauthorized Access to Data, Local Unauthorized Access Date: 12 March 2009 OS: Windows 2003, Windows 2000, Windows XP, Server 2008, Windows Vista URL: http://www.auscert.org.au/10635 Title: ESB-2009.0234 -- [HP-UX] -- HP-UX Running Java, Remote Execution of Arbitrary Code and Other Vulnerabilities Date: 12 March 2009 OS: HP-UX URL: http://www.auscert.org.au/10634 Title: ESB-2009.0233 -- [Cisco] -- Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability Date: 12 March 2009 OS: Cisco Products URL: http://www.auscert.org.au/10633 Title: ESB-2009.0232 -- [Linux] -- Security Vulnerability in Sun xVM VirtualBox for the Linux Platform may Lead to Escalation of Privileges Date: 12 March 2009 OS: Ubuntu, Debian GNU/Linux, Other Linux Variants, Red Hat Linux URL: http://www.auscert.org.au/10632 Title: ESB-2009.0231 -- [Solaris] -- Multiple Security Issues in the Doors Kernel Functionality Date: 12 March 2009 OS: Solaris URL: http://www.auscert.org.au/10631 Title: ESB-2009.0230 -- [Solaris] -- Security Vulnerability in the Solaris NFS Server Security Modes (nfssec(5)) may Lead to Unauthorized Access to Shared Resources Date: 13 March 2009 OS: Solaris URL: http://www.auscert.org.au/10628 Title: ESB-2009.0229 -- [Solaris] -- A Security Vulnerability in the Solaris NFS Daemon (nfsd(1M)) May Allow Unauthorized Access to Data Date: 13 March 2009 OS: Solaris URL: http://www.auscert.org.au/10627 Title: ESB-2009.0228 -- [Linux] -- A number of vulnerabilities have been identified in the Linux kernel Date: 11 March 2009 OS: Ubuntu, Debian GNU/Linux, Other Linux Variants, Red Hat Linux URL: http://www.auscert.org.au/10626 Title: ESB-2009.0227 -- [Win][UNIX/Linux] -- A vulnerability has been identifed in openoffice.org Date: 11 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10625 Title: ESB-2009.0226 -- [UNIX/Linux][Debian] -- New mahara packages fix cross-site scripting Date: 11 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10624 Title: ESB-2009.0225 -- [UNIX/Linux][Debian] -- New znc packages fix privilege escalation Date: 11 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10623 Title: ESB-2009.0224 -- [Win][Linux][HP-UX][Solaris][AIX] -- IBM Tivoli Storage Manager Express Heap Buffer Overflow Vulnerability Date: 11 March 2009 OS: Solaris, Ubuntu, Debian GNU/Linux, Windows 2003, Windows 2000, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10622 Title: ESB-2009.0223 -- [UNIX/Linux] -- Asterisk Remote Crash Vulnerability in SIP channel driver Date: 13 March 2009 OS: AIX, HP-UX, Mac OS X, Red Hat Linux, Other Linux Variants, FreeBSD, OpenBSD, IRIX, Other BSD Variants, Debian GNU/Linux, Ubuntu, HP Tru64 UNIX, Solaris URL: http://www.auscert.org.au/10620 Title: ESB-2009.0222 -- [Win] -- Vulnerabilities in DNS and WINS Server Could Allow Spoofing Date: 11 March 2009 OS: Windows 2003, Windows 2000, Server 2008 URL: http://www.auscert.org.au/10619 Title: ESB-2009.0221 -- [Win] -- Vulnerability in SChannel Could Allow Spoofing Date: 11 March 2009 OS: Windows 2003, Windows 2000, Windows XP, Server 2008, Windows Vista URL: http://www.auscert.org.au/10618 Title: ESB-2009.0220 -- [Linux] -- A number of vulnerabilities have been identified in Mozilla Firefox as used by Avaya Date: 10 March 2009 OS: Ubuntu, Debian GNU/Linux, Other Linux Variants, Red Hat Linux URL: http://www.auscert.org.au/10615 Title: ESB-2009.0219 -- [Linux] -- Openswan: Insecure temporary file creation Date: 10 March 2009 OS: Ubuntu, Debian GNU/Linux, Other Linux Variants, Red Hat Linux, Mac OS X URL: http://www.auscert.org.au/10614 Title: ESB-2009.0218 -- [UNIX/Linux] -- MPFR: Denial of Service Date: 10 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX URL: http://www.auscert.org.au/10613 Title: ESB-2009.0217 -- [Win][UNIX/Linux] -- OptiPNG: User-assisted execution of arbitrary code Date: 10 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10612 Title: ESB-2009.0216 -- [Win][UNIX/Linux] -- Irrlicht: User-assisted execution of arbitrary code Date: 10 March 2009 OS: Windows ME, Windows Vista, Mac OS X, Windows NT 4, Red Hat Linux, Server 2008, Windows XP, Other Linux Variants, Windows 2000, Windows 2003, Debian GNU/Linux, Ubuntu, Windows 98/98SE URL: http://www.auscert.org.au/10610 Title: ESB-2009.0215 -- [UNIX/Linux] -- vulnerabilities in poppler Date: 09 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10608 Title: ESB-2009.0214 -- [Solaris] -- Denial of Service (DoS) Vulnerability in NFSv4 Server Kernel Module Date: 13 March 2009 OS: Solaris URL: http://www.auscert.org.au/10607 Title: ESB-2009.0213 -- [Solaris] -- Kernel Patches/Changes may Stop Sun Cluster Node From Joining the Cluster Date: 09 March 2009 OS: Solaris URL: http://www.auscert.org.au/10606 Title: ESB-2009.0212 -- [Solaris] -- Vulnerability in the xterm(1) program may lead to execution of arbitrary code Date: 09 March 2009 OS: Solaris URL: http://www.auscert.org.au/10605 Title: ESB-2009.0211 -- [Win][UNIX/Linux] -- Apache Tomcat cross-site scripting vulnerability Date: 09 March 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10604 Title: ESB-2009.0210 -- [Win][UNIX/Linux][RedHat] -- Moderate: JBoss Enterprise Application Platform update Date: 09 March 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/10603 Title: ESB-2009.0207 -- [Solaris] -- A Security Vulnerability With the Solaris Crypto Driver May Cause a System Panic Date: 11 March 2009 OS: Solaris URL: http://www.auscert.org.au/10597 Title: ESB-2009.0206 -- [Solaris] -- Cross Site Scripting (XSS) Vulnerability in Sun Management Center (SunMC) Performance Reporting Module Date: 13 March 2009 OS: Solaris URL: http://www.auscert.org.au/10596 Title: ESB-2009.0189 -- [Win][UNIX/Linux] -- Taxonomy Theme (Drupal Third-party module) - Cross site scripting Date: 10 March 2009 OS: Windows Vista, AIX, HP-UX, Mac OS X, Red Hat Linux, Server 2008, Windows XP, Other Linux Variants, FreeBSD, Windows 2000, OpenBSD, Windows 2003, IRIX, Other BSD Variants, Debian GNU/Linux, Ubuntu, HP Tru64 UNIX, Solaris URL: http://www.auscert.org.au/10568 Title: ESB-2009.0188 -- [UNIX/Linux] -- New dkim-milter packages fix denial of service Date: 09 March 2009 OS: AIX, HP-UX, Mac OS X, Red Hat Linux, Other Linux Variants, FreeBSD, OpenBSD, IRIX, Other BSD Variants, Debian GNU/Linux, Ubuntu, HP Tru64 UNIX, Solaris URL: http://www.auscert.org.au/10567 Title: ESB-2009.0164 -- [Win][UNIX/Linux][Appliance] -- Intercepting proxy servers may incorrectly rely on HTTP headers to make connections Date: 10 March 2009 OS: Ubuntu, Windows 98/98SE, HP Tru64 UNIX, Solaris, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Server 2008, Cisco Products, Red Hat Linux, Windows NT 4, Mac OS X, HP-UX, AIX, Windows Vista, Windows ME URL: http://www.auscert.org.au/10537 Title: ESB-2009.0153 -- [Solaris] -- A Security Vulnerability in the Solaris Kerberos PAM Module May Allow Use of a User Specified Kerberos Configuration File, Leading to Escalation of Privileges Date: 12 March 2009 OS: Solaris URL: http://www.auscert.org.au/10506 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ===========================================================================

13 years, 3 months

Four blocks of AS Numbers allocated

by Leo Vegoda

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, The IANA AS Numbers registry has been updated to reflect the allocation of four blocks of AS Numbers recently. 49152-50175 Assigned by RIPE NCC whois.ripe.net 2009-03-06 50176-51199 Assigned by RIPE NCC whois.ripe.net 2009-03-06 51200-52223 Assigned by RIPE NCC whois.ripe.net 2009-03-06 52224-53247 Assigned by LACNIC whois.lacnic.net 2009-03-11 The registry can be found at: http://www.iana.org/assignments/as-numbers/as-numbers.xml Regards, Leo Vegoda Number Resources Manager, IANA -----BEGIN PGP SIGNATURE----- Version: 9.9.1.287 wj8DBQFJuUXxvBLymJnAzRwRAkgiAJ4gPAIF9egizyMbGGB/2MAciOCsdQCfXQfX N4gRb5lyNjDDcKZ4bhf5AqY= =LKc/ -----END PGP SIGNATURE-----

13 years, 3 months

ASO Call for Comments on Nominees for ICANN Board Seat

by Srinivas (Sunny) Chendi

Dear Colleagues, Following a public nomination period that closed on 22 February 2009, the ASO Address Council (ASO AC) selected the final set of candidates to fill the ASO seat on the ICANN Board. This seat is currently held by Dave Wodelet, whose term expires in May 2009. The candidates are: - Jody Daniel Newman - Ray Plzak - Jordi Palet Martinez - Rajesh Chharia - Suzanne Woolf - Barry Shein The candidates listed above agree to serve in an ASO seat on the ICANN Board of Directors if selected by the ASO Address Council. In April 2009, the ASO AC will make its final selection to appoint one of these individuals to fill the ASO Board seat. To aid them in making their final selection, the ASO AC members request public comments and statements of support for the candidates. The public comment period will remain open until 23:59 (UTC) on 9 April 2009. You can provide your comments and statements of support for the candidates on the aso-announce mailing list. These will be publicly archived at: http://www.aso.icann.org/lists Alternatively, if you would prefer not to subscribe to that mailing list, you may submit your comments directly to the ASO AC Nominations Committee by sending an email to <nom-com(a)aso.icann.org>. A digest of all comments sent to the mailing list or received by the Nominations Committee will be published on the ASO web site at: http://www.aso.icann.org/elections Best regards, Srinivas (Sunny) Chendi External Relations Manager APNIC For; Axel Pawlik Managing Director RIPE NCC On behalf of the ASO/NRO Secretariat

13 years, 3 months

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

pacnog March 2009