pacnog May 2009

pacnog@pacnog.org

11 participants
13 discussions

by noreply＠apnic.net

Dear Subscriber, This is the monthly reminder of subscription information for the pacnog list, hosted at APNIC. For subscription information including how to un-subscribe go to http://mailman.apnic.net/mailman/listinfo/pacnog Thank you for participating in this discussion. Kind Regards, List administrator

13 years, 1 month

AusCERT Week in Review - Week Ending 29/05/2009 (AUSCERT#20073f686)

by Paul Fahey

Alerts, Advisories and Updates: ------------------------------- Title: AA-2009.0130 -- [Win][UNIX/Linux] -- ImageMagick: Execute Arbitrary Code Date: 28 May 2009 URL: http://www.auscert.org.au/11058 Title: AU-2009.0023 -- AusCERT Update - [Win] - Microsoft Security Bulletin (MS09-003) Major Revision Date: 28 May 2009 URL: http://www.auscert.org.au/11056 Title: AL-2009.0041 -- [Win] -- Possible authentication bypass vulnerability in IIS6 Date: 27 May 2009 URL: http://www.auscert.org.au/11001 Title: AA-2009.0125 -- [Win] -- BlackBerry Enterprise Server: Execute Arbitrary Code Date: 27 May 2009 URL: http://www.auscert.org.au/11050 Title: AA-2009.0126 -- [Win] -- Microsoft Windows Vista and Server 2008 Service Pack 2 is now available Date: 27 May 2009 URL: http://www.auscert.org.au/11051 Title: AA-2009.0127 -- [Win] -- Nortel Contact Center Manager: Inappropriate Access Date: 27 May 2009 URL: http://www.auscert.org.au/11052 Title: AA-2009.0128 -- [Win][UNIX/Linux] -- DotNetNuke: Execute Arbitrary Code Date: 27 May 2009 URL: http://www.auscert.org.au/11053 Title: AA-2009.0129 -- [Win][UNIX/Linux] -- libsndfile: Execute Arbitrary Code Date: 27 May 2009 URL: http://www.auscert.org.au/11054 Title: AA-2009.0122 -- [Win] -- Panda Security: Reduced Security Date: 26 May 2009 URL: http://www.auscert.org.au/11042 Title: AA-2009.0123 -- [Win][Linux][AIX] -- IBM WebSphere Partner Gateway: Access Confidential Data Date: 26 May 2009 URL: http://www.auscert.org.au/11044 Title: AA-2009.0124 -- [Win][UNIX/Linux] -- Wireshark: Denial of Service Date: 26 May 2009 URL: http://www.auscert.org.au/11046 External Security Bulletins: ---------------------------- Title: ESB-2008.1053 -- [Solaris] -- A Buffer Overflow Security Vulnerability in the Solaris sadmind(1M) Daemon May Lead to Execution of Arbitrary Code Date: 25 May 2009 OS: Solaris URL: http://www.auscert.org.au/10085 Title: ESB-2009.0512 -- [Win] -- Citrix Password Manager: Inappropriate Access Date: 29 May 2009 OS: Windows 2003, Windows 2000, Windows XP, Windows Server 2008, Windows Vista URL: http://www.auscert.org.au/11060 Title: ESB-2009.0511 -- [Win][UNIX/Linux] -- Ajax Session (Drupal third-party module): Cross-site Request Forgery Date: 29 May 2009 OS: Windows Vista, AIX, HP-UX, Mac OS X, Red Hat Linux, Windows Server 2008, Windows XP, Other Linux Variants, FreeBSD, Windows 2000, OpenBSD, Windows 2003, IRIX, Other BSD Variants, Debian GNU/Linux, Ubuntu, HP Tru64 UNIX, Solaris URL: http://www.auscert.org.au/11059 Title: ESB-2009.0510 -- [Win][Netware][UNIX/Linux][RedHat] -- httpd: Execute Arbitrary Code Date: 28 May 2009 OS: Solaris, HP Tru64 UNIX, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, FreeBSD, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, Novell Netware, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/11057 Title: ESB-2009.0509 -- [HP-UX] -- HP-UX Running Java: Multiple Vulnerabilities Date: 28 May 2009 OS: HP-UX URL: http://www.auscert.org.au/11055 Title: ESB-2009.0508 -- [RedHat] -- Red Hat Application Stack v2.3: Execute Arbitrary Code Date: 27 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11049 Title: ESB-2009.0507 -- [RedHat] -- squirrelmail: Execute Arbitrary Code Date: 27 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11048 Title: ESB-2009.0506 -- [RedHat] -- rhpki-ra: Inappropriate Access Date: 27 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11047 Title: ESB-2009.0505 -- [SUSE] -- IBM JDK 5: Multiple Vulnerabilities Date: 26 May 2009 OS: Other Linux Variants URL: http://www.auscert.org.au/11043 Title: ESB-2009.0504 -- [RedHat] -- freetype: Execute Arbitrary Code Date: 25 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11041 Title: ESB-2009.0503 -- [UNIX/Linux][Debian] -- cscope: Execute Arbitrary Code Date: 25 May 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/11040 Title: ESB-2009.0502 -- [RedHat] -- pidgin: Multiple Vulnerabilities Date: 25 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11039 Title: ESB-2009.0501 -- [Win][UNIX/Linux][Debian] -- pidgin: Execute Arbitrary Code Date: 25 May 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/11038 Title: ESB-2009.0500 -- [Solaris] -- sadmind(1M) Daemon: Execute Arbitrary Code Date: 25 May 2009 OS: Solaris URL: http://www.auscert.org.au/11037 Title: ESB-2009.0499 -- [OpenSolaris] -- Solaris Secure Digital Slot Driver: Execute Arbitrary Code Date: 25 May 2009 OS: Solaris URL: http://www.auscert.org.au/11036 Title: ESB-2009.0498 -- [Linux][Solaris] -- Sun Java System Portal Server: Execute Arbitrary Code Date: 25 May 2009 OS: Solaris, Ubuntu, Debian GNU/Linux, Other Linux Variants, Red Hat Linux URL: http://www.auscert.org.au/11035 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ===========================================================================

13 years, 1 month

FW: Apply for an ISIF grant now! (fwd)

by PITA Manager

Dear all, see below invitations for ISIF 2010 grant for projects: Fully encouraging everyone to raise your level of participations by creating new initiatives and implementations to contribute to developments in your community, country and region Perhaps this quote by Ray Goforth would create you with a challenge: "There are two types of people who will tell you that you cannot make a difference in this world: Those who are afraid to try themselves, and those who are afraid that you will succeed." We are sending you this email to tell you that you can make the difference!!! Best wishes Cheers Fred #see below: ---------- Forwarded message ---------- Date: Mon, 25 May 2009 19:34:28 +1000 From: Sylvia Cadena <sylvia(a)apnic.net> To: undisclosed-recipients: ; Subject: Apply for an ISIF grant now! Hi there! It will be really great if you can help me to distribute this Press Release among your contacts in the Asia Pacific region, just in case we haven't reach them with the campaign we are running now. Thanks a lot for all your help! Sylvia _______________________________________________________________________ ISIF Grant Program Invites Applicants _______________________________________________________________________ Applications for the Information Society Innovation Fund (ISIF) 2010 grant round are now open. Launched in 2008, the ISIF grant program aims to stimulate creative solutions to ICT development needs in the Asia Pacific region. The program provides grants of up to AUD 40,000 per project that help advance local and regional initiatives that introduce, improve, and apply Internet and other digital communications technologies for the benefit of Asia-Pacific users and communities. This year's round of funding will benefit about 8 to 10 projects. ISIF is a joint initiative between the Canadian International Development Research Centre (IDRC), the Internet Society (ISOC), and the Asia Pacific Network Information Centre (APNIC). It is proudly sponsored by the DotAsia Organization, the registry operator for the .ASIA top-level domain. The overwhelming success of the first round of applications reflects the importance of technological innovation in today's challenging market circumstances, especially for developing economies. Karen Rose, ISOC Director of Education and Programmes stated: "We received many strong proposals from a diverse pool of applicants in the inaugural year of the ISIF program. We hope to have similar success this year, and strongly encourage new applicants to submit proposals for ISIF funding, as well as revised submissions from applicants that were unsuccessful last year." Project proposals from Asia Pacific-based public or private sector organizations, university, or research and development institutions and non-government organizations will be considered. Applications must be aligned with ISIF program objectives, selection criteria, and administrative guidelines. For example, project results must be shared as stated in the ISIF copyright and license scheme. Individuals are not eligible for grants. "The ISIF grants program is a great opportunity for innovation in the Asia Pacific. We hope that with the global Internet community facing the prospect of IPv4 depletion in the next few years, some 2010 grant applications will feature projects that assist the adoption of IPv6 in the region," said Paul Wilson, Director General of APNIC. Applications for the 2010 grant round closes on 31 July 2009. Grants will be made on a competitive basis and successful applicants will be required to make project details, outcomes, and findings publicly available. Complete information on the project and how to apply is available on the ISIF website at www.isif.asia. For more information: Sylvia Cadena | ISIF Program Officer | info(a)isif.asia | http://www.isif.asia -- Sylvia Cadena | Project Officer ISIF - Information Society innovation Fund www.isif.asia | sylvia(a)isif.asia | sylvia(a)apnic.net sip: sylvia(a)voip.apnic.net | skype: sylviacadena APNIC / ISIF Secretariat Level 1, 33 Park Road, Milton. 4064. PO Box 2131 Brisbane, QLD. Australia. Tel. +61 7 38583129 Fax. +61 7 38583199 * APNIC and ISIF encourages the saving of paper by not printing this email

13 years, 1 month

Apply for an ISIF grant now!

by Sylvia Cadena

Hi there! It will be really great if you can help me to distribute this Press Release among your contacts in the Asia Pacific region, just in case we haven't reach them with the campaign we are running now. Thanks a lot for all your help! Sylvia _______________________________________________________________________ ISIF Grant Program Invites Applicants _______________________________________________________________________ Applications for the Information Society Innovation Fund (ISIF) 2010 grant round are now open. Launched in 2008, the ISIF grant program aims to stimulate creative solutions to ICT development needs in the Asia Pacific region. The program provides grants of up to AUD 40,000 per project that help advance local and regional initiatives that introduce, improve, and apply Internet and other digital communications technologies for the benefit of Asia-Pacific users and communities. This year’s round of funding will benefit about 8 to 10 projects. ISIF is a joint initiative between the Canadian International Development Research Centre (IDRC), the Internet Society (ISOC), and the Asia Pacific Network Information Centre (APNIC). It is proudly sponsored by the DotAsia Organization, the registry operator for the .ASIA top-level domain. The overwhelming success of the first round of applications reflects the importance of technological innovation in today's challenging market circumstances, especially for developing economies. Karen Rose, ISOC Director of Education and Programmes stated: "We received many strong proposals from a diverse pool of applicants in the inaugural year of the ISIF program. We hope to have similar success this year, and strongly encourage new applicants to submit proposals for ISIF funding, as well as revised submissions from applicants that were unsuccessful last year." Project proposals from Asia Pacific-based public or private sector organizations, university, or research and development institutions and non-government organizations will be considered. Applications must be aligned with ISIF program objectives, selection criteria, and administrative guidelines. For example, project results must be shared as stated in the ISIF copyright and license scheme. Individuals are not eligible for grants. "The ISIF grants program is a great opportunity for innovation in the Asia Pacific. We hope that with the global Internet community facing the prospect of IPv4 depletion in the next few years, some 2010 grant applications will feature projects that assist the adoption of IPv6 in the region," said Paul Wilson, Director General of APNIC. Applications for the 2010 grant round closes on 31 July 2009. Grants will be made on a competitive basis and successful applicants will be required to make project details, outcomes, and findings publicly available. Complete information on the project and how to apply is available on the ISIF website at www.isif.asia. For more information: Sylvia Cadena | ISIF Program Officer | info(a)isif.asia | http://www.isif.asia -- Sylvia Cadena | Project Officer ISIF - Information Society innovation Fund www.isif.asia | sylvia(a)isif.asia | sylvia(a)apnic.net sip: sylvia(a)voip.apnic.net | skype: sylviacadena APNIC / ISIF Secretariat Level 1, 33 Park Road, Milton. 4064. PO Box 2131 Brisbane, QLD. Australia. Tel. +61 7 38583129 Fax. +61 7 38583199 * APNIC and ISIF encourages the saving of paper by not printing this email

13 years, 1 month

Application Round Opens for Seoul Meeting Fellowships

by Save Vocea

Dear all, (apologies for duplicate messages received) Some of you may be interested to attend/participate in an ICANN meeting via this fellowship program. Best, Save Vocea ICANN --snip-- News Alert http://www.icann.org/en/announcements/announcement-22may09-en.htm Application Round Opens for Seoul Meeting Fellowships Program ensures global representation at ICANN¹s International Public Meetings 22 May 2009 MARINA DEL REY, Calif. : The Internet Corporation for Assigned Names and Numbers has launched the eighth round of fellowship program applications for its 36th International Public Meeting to be held in Seoul, Korea from 25-30 October 2009. For this meeting, the National Internet Development Agency of Korea (NIDA) is partnering with ICANN to support the fellowship program and increase participation from the Asia Pacific region. "Just like the Internet, ICANN is global in scope in its operations," said Theresa Swinehart, ICANN's Vice President, Global and Strategic Partnerships. "Our fellowship program has had a lot of success at our last six meetings in making sure global voices are heard in the wide variety of public forums that it holds." For the Sydney Meeting, there are 33 fellows from 28 countries, chosen from 97 applications received. 15 of the fellows are alumni from at least one of the past six programmes; 12 fellows are first-time attendees to any ICANN meeting and 6 have attended past meetings, but are first time fellows. Priority is given to applicants who are current residents of developing and least developed nations and interested in participating in ICANN and its supporting organizations, such as the Governmental Advisory Committee, the Country Code Names Supporting Organization, and the Generic Names Supporting Organization. The fellowship will assist in covering airfare, hotel and a stipend. Recipients will be expected to actively participate in and contribute to ICANN processes. As always, registration for ICANN¹s meetings is free for anyone wanting to attend. Applications for the meeting in Seoul will be accepted from now until 1200 PDT (UTC -7) on 6 July 2009. More information, as well as a link to the application for a fellowship, is available online at: http://www.icann.org/en/fellowships/ About ICANN: ICANN is responsible for the global coordination of the Internet's system of unique identifiers such as domain names (.org, .museum and country codes like .uk) and the addresses used in a variety of Internet protocols that help computers reach each other over the Internet. Careful management of these resources is vital to the Internet's operation, so ICANN's global stakeholders meet regularly to develop policies that ensure the Internet's ongoing security, stability, and interoperability. ICANN is an internationally organized, public benefit non-profit company. For more information please visit: www.icann.org <http://www.icann.org/> .

13 years, 1 month

NRO Nominations now open

by Srinivas (Sunny) Chendi

_______________________________________________________________________ Nominations now open for Number Resource Organization Number Council _______________________________________________________________________ The nomination period for the Number Resource Organization Number Council (NRO NC) opens today, 22 May 2009. How to nominate --------------- To nominate yourself or someone else as a candidate for the position, submit the details using our nomination page: http://meetings.apnic.net/28/elections/nominate Key dates --------- 22 May - NRO NC nominations open 28 July - NRO NC nominations close (17:30 UTC+10) 12 August - NRO NC online voting opens for APNIC members only 26 August - NRO NC online voting closes (09:00 UTC+8, Beijing time) 28 August - NRO NC onsite voting takes place (09:00-14:00 UTC+8, Beijing time) About the NRO NC ---------------- The NRO NC consists of 15 members, three from each of the five Regional Internet Registry (RIR) regions. Three individuals are appointed to the NRO NC from each of the RIR regions, including two members selected by the respective regional policy forum, and one member appointed by the Board of the RIR. Kenny Huang's position as one of the delegates from the APNIC region will become available on 31 December 2009. One individual from the Asia Pacific region will be selected to serve on the NRO NC for two years - from 1 January 2010 to 31 December 2011. If elected as a member of the NRO NC, you will: - Oversee recommendations on global IP address policy that result from the various RIRs' policy development processes - Have direct influence on the implementation of these policies - Participate in the management of policy development activities - Appoint people to the ICANN Board of Directors More information ---------------- For more information about the role and the NRO NC, please see: http://meetings.apnic.net/28/elections For more on the current members of the NRO NC, please see: http://aso.icann.org/ac/index.html If you have any questions, please contact: helpdesk(a)apnic.net Regards Sunny -- -------------------------------------------------------------------- Srinivas (Sunny) Chendi email: sunny(a)apnic.net External Relations Manager, APNIC sip: sunny(a)voip.apnic.net http://www.apnic.net ph/fx: +61 7 3858 3189/99 ____________________________________________________________________

13 years, 1 month

AusCERT Week in Review - Week Ending 22/05/2009 (AUSCERT#20073f686)

by Paul Fahey

Alerts, Advisories and Updates: ------------------------------- Title: AU-2009.0022 -- AusCERT Update - [Debian] - squirrelmail: Remote Code Execution Date: 22 May 2009 URL: http://www.auscert.org.au/11031 Title: AA-2009.0121 -- [Win][Linux] -- Novell GroupWise: Multiple Vulnerabilities Date: 22 May 2009 URL: http://www.auscert.org.au/11033 Title: AA-2009.0120 -- [OSX] -- Java Runtime Environment: Multiple Vulnerabilities Date: 21 May 2009 URL: http://www.auscert.org.au/11030 Title: AL-2009.0041 -- [Win] -- Possible authentication bypass vulnerability in IIS6 Date: 19 May 2009 URL: http://www.auscert.org.au/11001 Title: AU-2009.0021 -- AusCERT Update - [Win] - Update to recent IIS vulnerability Date: 19 May 2009 URL: http://www.auscert.org.au/11009 Title: AL-2009.0042 -- [Win][Linux] -- HP System Management Homepage: Cross site scripting Date: 18 May 2009 URL: http://www.auscert.org.au/11005 External Security Bulletins: ---------------------------- Title: ESB-2009.0697 -- [Win][UNIX/Linux] -- Drupal third-party modules: Multiple Vulnerabilities Date: 21 May 2009 OS: Windows Vista, AIX, HP-UX, Mac OS X, Red Hat Linux, Windows Server 2008, Windows XP, Other Linux Variants, FreeBSD, Windows 2000, OpenBSD, Windows 2003, IRIX, Other BSD Variants, Debian GNU/Linux, Ubuntu, HP Tru64 UNIX, Solaris URL: http://www.auscert.org.au/10990 Title: ESB-2009.0497 -- [Linux][Solaris] -- Sun Java System Communications Express: Cross-Site Scripting Date: 22 May 2009 OS: Red Hat Linux, Other Linux Variants, Debian GNU/Linux, Ubuntu, Solaris URL: http://www.auscert.org.au/11032 Title: ESB-2009.0496 -- [SUSE] -- kernel: Multiple vulnerabilities Date: 21 May 2009 OS: Other Linux Variants URL: http://www.auscert.org.au/11029 Title: ESB-2009.0495 -- [SUSE] -- acroread: Execute Arbitrary Code Date: 21 May 2009 OS: Other Linux Variants URL: http://www.auscert.org.au/11028 Title: ESB-2009.0494 -- [Win][UNIX/Linux] -- Drupal third-party modules: Multiple Vulnerabilities Date: 21 May 2009 OS: Solaris, HP Tru64 UNIX, Windows 98/98SE, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, Windows NT 4, Mac OS X, HP-UX, AIX, Windows Vista, Windows ME URL: http://www.auscert.org.au/11027 Title: ESB-2009.0493 -- [UNIX/Linux][Debian] -- nsd: Denial of Service Date: 21 May 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, HP-UX, AIX URL: http://www.auscert.org.au/11026 Title: ESB-2009.0492 -- [Win] -- CiscoWorks: Access Privileged Data Date: 21 May 2009 OS: Windows 98/98SE, Windows 2003, Windows 2000, Windows XP, Windows Server 2008, Windows NT 4, Windows Vista, Windows ME URL: http://www.auscert.org.au/11025 Title: ESB-2009.0491 -- [RedHat] -- httpd mod_proxy_ajp: Inappropriate access Date: 21 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11024 Title: ESB-2009.0490 -- [Debian] -- ipsec-tools: Denial of service Date: 21 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/11023 Title: ESB-2009.0489 -- [Solaris] -- Third-party Applications Using GSS-API: Execute Arbitrary Code Date: 20 May 2009 OS: Solaris URL: http://www.auscert.org.au/11022 Title: ESB-2009.0488 -- [RedHat] -- kernel: Execute Arbitrary Code Date: 20 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11021 Title: ESB-2009.0487 -- [Win][UNIX/Linux][Solaris][AIX] -- IBM Tivoli Storage Manager: Multiple Vulnerabilities Date: 20 May 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/11020 Title: ESB-2009.0486 -- [AIX] -- AIX libc MALLOCDEBUG: Execute Arbitrary Code Date: 20 May 2009 OS: AIX URL: http://www.auscert.org.au/11019 Title: ESB-2009.0485 -- [Win][Linux] -- HP System Management Homepage: Cross-site Scripting Date: 20 May 2009 OS: Ubuntu, Debian GNU/Linux, Windows 2003, Other Linux Variants, Windows Server 2008, Red Hat Linux URL: http://www.auscert.org.au/11018 Title: ESB-2009.0484 -- [Debian] -- ntp: Execute Arbitrary Code Date: 20 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/11017 Title: ESB-2009.0483 -- [Debian] -- squirrelmail: Multiple Vulnerabilities Date: 22 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/11016 Title: ESB-2009.0482 -- [Solaris] -- fstat: Denial of Service Date: 19 May 2009 OS: Solaris URL: http://www.auscert.org.au/11015 Title: ESB-2009.0481 -- [Win][Linux] -- HP Remote Graphics Software: Inappropriate access Date: 19 May 2009 OS: Ubuntu, Debian GNU/Linux, Windows 2003, Windows 2000, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, Windows NT 4, Windows Vista URL: http://www.auscert.org.au/11014 Title: ESB-2009.0480 -- [RedHat] -- util-linux: Provide misleading information Date: 19 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11013 Title: ESB-2009.0479 -- [RedHat] -- nfs-utils: Reduced security Date: 19 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11011 Title: ESB-2009.0478 -- [RedHat] -- Kernel: Increased privileges Date: 19 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11010 Title: ESB-2009.0477 -- [RedHat] -- java-1.5.0-ibm: Execute arbitrary code Date: 19 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11008 Title: ESB-2009.0476 -- [Linux][RedHat] -- ipsec-tools: Denial of service Date: 19 May 2009 OS: Ubuntu, Debian GNU/Linux, Other Linux Variants, Red Hat Linux URL: http://www.auscert.org.au/11007 Title: ESB-2009.0475 -- [RedHat] -- ntp: Execute arbitrary code Date: 19 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11006 Title: ESB-2009.0474 -- [Solaris][OpenSolaris] -- Solaris SASL: Denial of Service Date: 18 May 2009 OS: Solaris URL: http://www.auscert.org.au/11004 Title: ESB-2009.0473 -- [Debian] -- Kernel: Multiple vulnerabilities Date: 18 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/11003 Title: ESB-2009.0472 -- [Win][Linux][FreeBSD][HP-UX][Solaris][AIX] -- Oracle Outside In: Execute Arbitrary Code/Commands Date: 18 May 2009 OS: Solaris, Ubuntu, Debian GNU/Linux, IRIX, Windows 2003, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, HP-UX, Windows Vista URL: http://www.auscert.org.au/11002 Title: ESB-2009.0127 -- [Win][UNIX/Linux] -- HP Storage Essentials SRM, Remote Unauthorized Access Date: 21 May 2009 OS: Windows Vista, AIX, HP-UX, Red Hat Linux, Windows XP, Other Linux Variants, Windows 2000, Windows 2003, IRIX, Debian GNU/Linux, Ubuntu, HP Tru64 UNIX, Solaris URL: http://www.auscert.org.au/8751 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ===========================================================================

13 years, 1 month

Satellite WAN Optimization Technologies

by Terry Rupeni (ITS-USP)

Bula All, Has anyone had experiences in using Riverbed SteelHead WAN Optimization Technologies or similar technologies over their Satellite Bandwidth Links. I went to a demostration recently held in Fiji and the technology looks promising but would like to hear about real deployment senarios and issues and not all the Sales hype. Thanks Terry Rupeni Network Analyst Ph# (+679) 323 2113 Systems & Networks Group Fax#(+679) 323 1533 Information Technology Services University of the South Pacific Suva, Fiji

13 years, 1 month

AusCERT Week in Review - Week Ending 15/05/2009 (AUSCERT#20073f686)

by Patrick Mannion

Alerts, Advisories and Updates: ------------------------------- Title: AA-2009.0117 -- [Win][UNIX/Linux] -- Matt Wright FormMail: Multiple Vulnerabilities Date: 15 May 2009 URL: http://www.auscert.org.au/10996 Title: AA-2009.0118 -- [Linux] -- kernel: Execute Arbitrary Code Date: 15 May 2009 URL: http://www.auscert.org.au/10997 Title: AA-2009.0119 -- [Win][UNIX/Linux] -- Dokeos: Multiple Vulnerabilities Date: 15 May 2009 URL: http://www.auscert.org.au/10998 Title: AA-2009.0115 -- [Win][UNIX/Linux] -- OpenSC: Inappropriate Access Date: 14 May 2009 URL: http://www.auscert.org.au/10983 Title: AA-2009.0116 -- [Win][UNIX/Linux] -- Ruby: Execute Arbitrary Code Date: 14 May 2009 URL: http://www.auscert.org.au/10986 Title: AL-2009.0038 -- [Win][Mac][OSX] -- Microsoft Office PowerPoint: Execute Arbitrary Code Date: 13 May 2009 URL: http://www.auscert.org.au/10978 Title: AL-2009.0039 -- [Win][Mac][OSX] -- Safari: Execute Arbitrary Code Date: 13 May 2009 URL: http://www.auscert.org.au/10981 Title: AA-2009.0114 -- [Win][UNIX/Linux] -- Openfire: Inappropriate Access Date: 12 May 2009 URL: http://www.auscert.org.au/10977 Title: AL-2009.0037 -- [Win] -- Microsoft Bulletin Notification - May Pre-release Announcement Date: 12 May 2009 URL: http://www.auscert.org.au/10975 Title: AA-2009.0112 -- [Win] -- chrome: Execute Arbitrary Code Date: 11 May 2009 URL: http://www.auscert.org.au/10971 Title: AA-2009.0113 -- [Win] -- AVG: Reduced Security Date: 11 May 2009 URL: http://www.auscert.org.au/10973 External Security Bulletins: ---------------------------- Title: ESB-2009.0702 -- [Solaris][OpenSolaris] -- Thunderbird 2.0: Multiple Vulnerabilities Date: 15 May 2009 OS: Solaris URL: http://www.auscert.org.au/10994 Title: ESB-2009.0701 -- [Solaris][OpenSolaris] -- PostgreSQL: Denial of Service Date: 15 May 2009 OS: Solaris URL: http://www.auscert.org.au/10993 Title: ESB-2009.0700 -- [RedHat] -- Poppler: Execute Arbitrary Code Date: 15 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/10995 Title: ESB-2009.0699 -- [Solaris] -- Adobe Reader: Execute Arbitrary Code Date: 15 May 2009 OS: Solaris URL: http://www.auscert.org.au/10992 Title: ESB-2009.0698 -- [UNIX/Linux] -- squirrelmail: Multiple Vulnerabilities Date: 14 May 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10991 Title: ESB-2009.0697 -- [Win][UNIX/Linux] -- Drupal third-party modules: Multiple Vulnerabilities Date: 15 May 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10990 Title: ESB-2009.0696 -- [Win][Netware][Linux] -- HP Data Protector Express: Execute Arbitrary Code Date: 15 May 2009 OS: Windows 2003, Windows 2000, Other Linux Variants, Windows XP, Red Hat Linux, Novell Netware URL: http://www.auscert.org.au/10989 Title: ESB-2009.0695 -- [RedHat] -- perl-DBD-Pg: Execute Arbitrary Code/Commands Date: 14 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/10988 Title: ESB-2009.0694 -- [Win][UNIX/Linux] -- Drupal core: Execute Arbitrary Code Date: 14 May 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10987 Title: ESB-2009.0693 -- [RedHat] -- acroread: Execute Arbitrary Code/Commands Date: 14 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/10985 Title: ESB-2009.0692 -- [Win][UNIX/Linux] -- Adobe Reader and Acrobat: Execute Arbitrary Code/Commands Date: 14 May 2009 OS: HP Tru64 UNIX, Solaris, IRIX, OpenBSD, Other BSD Variants, FreeBSD, HP-UX, Ubuntu, Debian GNU/Linux, Other Linux Variants, Red Hat Linux, AIX, Windows Server 2008, Windows Vista, Windows 2003, Windows 2000, Windows XP, Mac OS X URL: http://www.auscert.org.au/10984 Title: ESB-2009.0691 -- [Slackware][Win][UNIX/Linux] -- gnutls: Multiple Vulnerabilities Date: 14 May 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10982 Title: ESB-2009.0690 -- [Mac][OSX] -- Mac OS X v10.5.7: Multiple Vulnerabilities Date: 13 May 2009 OS: Mac OS X URL: http://www.auscert.org.au/10980 Title: ESB-2009.0689 -- [Win][Linux][Solaris][AIX] -- Sun GlassFish Enterprise Server and Sun Java System Application Server: Execute Arbitrary Code Date: 13 May 2009 OS: Solaris, Ubuntu, Debian GNU/Linux, Windows 2003, Windows 2000, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, Mac OS X, AIX, Windows Vista URL: http://www.auscert.org.au/10979 Title: ESB-2009.0688 -- [Debian] -- qemu: Multiple Vulnerabilities Date: 12 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10976 Title: ESB-2009.0687 -- [Win][HP-UX][Solaris] -- HP OpenView Network Node Manager - Multiple vulnerabilities Date: 12 May 2009 OS: Windows Vista, HP-UX, Red Hat Linux, Windows Server 2008, Windows XP, Windows 2000, Windows 2003, Solaris URL: http://www.auscert.org.au/9563 Title: ESB-2009.0456 -- [SCO] -- igmp driver: Denial of Service Date: 12 May 2009 URL: http://www.auscert.org.au/10974 Title: ESB-2009.0455 -- [Win][Linux] -- F-Secure: Reduced Security Date: 11 May 2009 OS: Ubuntu, Debian GNU/Linux, Windows 2003, Windows 2000, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, Windows Vista URL: http://www.auscert.org.au/10972 Title: ESB-2009.0454 -- [Debian] -- xulrunner: Execute Arbitrary Code Date: 11 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10970 Title: ESB-2009.0453 -- [Debian] -- pango: Execute Arbitrary Code Date: 11 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10969 Title: ESB-2009.0452 -- [Win][UNIX/Linux][RedHat] -- pango: Execute Arbitrary Code Date: 11 May 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, Mac OS X, HP-UX, Windows Vista URL: http://www.auscert.org.au/10968 Title: ESB-2009.0411 -- [HP-UX] -- useradd: Inappropriate Access Date: 11 May 2009 OS: HP-UX URL: http://www.auscert.org.au/10910 Title: ESB-2009.0094 -- [Win][Netware][UNIX/Linux] -- CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities Date: 14 May 2009 OS: Windows Vista, AIX, HP-UX, Mac OS X, Red Hat Linux, Windows Server 2008, Windows XP, Other Linux Variants, FreeBSD, Windows 2000, OpenBSD, Windows 2003, IRIX, Other BSD Variants, Debian GNU/Linux, Ubuntu, HP Tru64 UNIX, Solaris URL: http://www.auscert.org.au/10424 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ===========================================================================

13 years, 1 month

AusCERT Week in Review - Week Ending 08/05/2009 (AUSCERT#20073f686)

by Patrick Mannion

Alerts, Advisories and Updates: ------------------------------- Title: AA-2009.0110 -- [Win][AIX] -- IBM Tivoli Storage Manager client: Multiple Vulnerabilities Date: 08 May 2009 URL: http://www.auscert.org.au/10959 Title: AA-2009.0111 -- [Linux] -- kernel: Inappropriate Access Date: 08 May 2009 URL: http://www.auscert.org.au/10961 Title: AA-2009.0109 -- [Win][UNIX/Linux] -- MySQL Community Server: Multiple Vulnerabilities Date: 06 May 2009 URL: http://www.auscert.org.au/10951 Title: AU-2009.0020 -- AusCERT Update - [Win][Linux][HP-UX][Solaris] - HP OpenView Network Node Manager - denial of service vulnerability Date: 05 May 2009 URL: http://www.auscert.org.au/10946 External Security Bulletins: ---------------------------- Title: ESB-2008.0962 -- [Win][Linux][HP-UX][Solaris] -- HP OpenView Network Node Manager - denial of service vulnerability Date: 05 May 2009 OS: Solaris, HP-UX, Ubuntu, Debian GNU/Linux, Other Linux Variants, Red Hat Linux, Windows Server 2008, Windows Vista, Windows 2003, Windows 2000, Windows XP URL: http://www.auscert.org.au/9948 Title: ESB-2009.0450 -- [UNIX/Linux] -- zsh: Denial of Service Date: 08 May 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10965 Title: ESB-2009.0449 -- [Debian] -- libwmf: Execute Arbitrary Code Date: 08 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10964 Title: ESB-2009.0448 -- [UNIX/Linux][Debian] -- ldns: Execute Arbitrary Code Date: 08 May 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10963 Title: ESB-2009.0447 -- [RedHat] -- kernel: Multiple vulnerabilities Date: 08 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/10962 Title: ESB-2009.0446 -- [RedHat] -- acpid: Denial of Service Date: 08 May 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/10960 Title: ESB-2009.0445 -- [Debian] -- Linux 2.6.18: Multiple Vulnerabilities Date: 07 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10958 Title: ESB-2009.0444 -- [Debian] -- kdegraphics: Multiple Vulnerabilities Date: 07 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10957 Title: ESB-2009.0443 -- [Debian] -- drupal6: Multiple Vulnerabilities Date: 07 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10956 Title: ESB-2009.0442 -- [UNIX/Linux][Debian] -- moin: Cross-site Scripting Date: 07 May 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10955 Title: ESB-2009.0441 -- [Win] -- NuPoint Messenger server: Access Confidential Data Date: 07 May 2009 OS: Windows 2003, Windows 2000, Windows XP, Windows Server 2008, Windows Vista URL: http://www.auscert.org.au/10954 Title: ESB-2009.0440 -- [Ubuntu] -- ClamAV: Reduced Security Date: 06 May 2009 OS: Ubuntu URL: http://www.auscert.org.au/10953 Title: ESB-2009.0439 -- [RedHat][SUSE] -- Insight Control Suite For Linux (ICE-LX): Multiple Vulnerabilities Date: 06 May 2009 OS: Other Linux Variants, Red Hat Linux URL: http://www.auscert.org.au/10952 Title: ESB-2009.0438 -- [Debian] -- xpdf: multiple vulnerabilities Date: 06 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10950 Title: ESB-2009.0437 -- [UNIX/Linux][Debian] -- quagga: Denial of Service Date: 05 May 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, Mac OS X, HP-UX, AIX URL: http://www.auscert.org.au/10949 Title: ESB-2009.0436 -- [Win][UNIX/Linux] -- Jetty HTTP server: Inappropriate Access Date: 05 May 2009 OS: Solaris, HP Tru64 UNIX, Ubuntu, Debian GNU/Linux, Other BSD Variants, IRIX, Windows 2003, OpenBSD, Windows 2000, FreeBSD, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, Mac OS X, HP-UX, AIX, Windows Vista URL: http://www.auscert.org.au/10948 Title: ESB-2009.0435 -- [Debian] -- php5: Multiple Vulnerabilities Date: 05 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10947 Title: ESB-2009.0434 -- [Win][Linux][HP-UX][Solaris] -- HP OpenView Network Node Manager: Execute Arbitrary Code Date: 05 May 2009 OS: Solaris, Ubuntu, Debian GNU/Linux, Windows 2003, Windows 2000, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, HP-UX, Windows Vista URL: http://www.auscert.org.au/10945 Title: ESB-2009.0433 -- [Win][Linux] -- Flash Media Server: Execute Arbitrary Code/Commands Date: 04 May 2009 OS: Ubuntu, Debian GNU/Linux, Windows 2003, Windows 2000, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, Windows Vista URL: http://www.auscert.org.au/10944 Title: ESB-2009.0432 -- [Debian] -- acpid: Denial of Service Date: 04 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10943 Title: ESB-2009.0431 -- [Debian] -- linux-2.6.24: Multiple Vulnerabilities Date: 04 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10942 Title: ESB-2009.0430 -- [Win][Netware][Linux] -- Symantec Reporting Server: Provide Misleading Information Date: 04 May 2009 OS: Ubuntu, Debian GNU/Linux, Windows 2003, Windows 2000, Other Linux Variants, Windows XP, Windows Server 2008, Red Hat Linux, Novell Netware, Windows Vista URL: http://www.auscert.org.au/10941 Title: ESB-2009.0429 -- [Debian] -- wireshark: Multiple Vulnerabilities Date: 04 May 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/10940 Title: ESB-2009.0428 -- [FreeBSD] -- FreeBSD 7.0: end-of-life notification Date: 04 May 2009 OS: FreeBSD URL: http://www.auscert.org.au/10939 Title: ESB-2009.0427 -- [HP-UX][Tru64][Solaris][AIX] -- ARCserve: Multiple Vulnerabilities Date: 04 May 2009 OS: Solaris, HP Tru64 UNIX, HP-UX, AIX URL: http://www.auscert.org.au/10938 Title: ESB-2009.0422 -- [Solaris] -- ASN.1 Printing: Denial of Service Date: 06 May 2009 OS: Solaris URL: http://www.auscert.org.au/10931 Title: ESB-2009.0416 -- [Win][UNIX/Linux] -- Drupal core and Drupal third-party modules: Multiple Vulnerabilities Date: 04 May 2009 OS: Windows Vista, AIX, HP-UX, Mac OS X, Red Hat Linux, Windows Server 2008, Windows XP, Other Linux Variants, FreeBSD, OpenBSD, Windows 2003, IRIX, Other BSD Variants, Debian GNU/Linux, Ubuntu, HP Tru64 UNIX, Solaris URL: http://www.auscert.org.au/10924 Title: ESB-2009.0035 -- [Solaris] -- The Solaris rpc.metad(1M) Daemon is Vulnerable to a Denial of Service (DoS) Attack Date: 06 May 2009 OS: Solaris URL: http://www.auscert.org.au/10329 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ===========================================================================

13 years, 1 month

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

pacnog May 2009