pacnog September 2009

pacnog@pacnog.org

10 participants
11 discussions

OT: Arbor 2009 Infrastructure Security Report - Request for Participation.

by Roland Dobbins

We're in the process of collecting feedback for the 2009 Infrastructure Security Report; this is the Fifth Edition of the report, and we'd really be grateful for your participation! The 2009 Infrastructure Security Survey is up and available for input. You can register to complete the survey at this URL: <https://www.tcb.net/survey/index.php?sid=98557&lang=en> We've again added many questions this time from past participants of the survey, this should be evidenced throughout. Feedback collection will end as soon as we've reached the desired number of respondents (ideally, 80+). We hope to make the results available by November 2009 at the latest. Also, please recall that NO personally- (or organizationally-) identifiable information will be shared in any manner. The 2008 edition of the survey is available here: <http://www.tcb.net/ISR2008_US.pdf> Or on the Arbor web site (reg required): <http://www.arbornetworks.com/report> Thanks in advance for your participation! ----------------------------------------------------------------------- Roland Dobbins <rdobbins(a)arbor.net> // <http://www.arbornetworks.com> Sorry, sometimes I mistake your existential crises for technical insights. -- xkcd #625

12 years, 9 months

Monthly List Reminder

by noreply＠apnic.net

Dear Subscriber, This is the monthly reminder of subscription information for the pacnog list, hosted at APNIC. For subscription information including how to un-subscribe go to http://mailman.apnic.net/mailman/listinfo/pacnog Thank you for participating in this discussion. Kind Regards, List administrator

12 years, 9 months

New application round for ICANN fellowship program- closing 6 Nov.

by Save Vocea

Hi all, ICANN has opened its next round of fellowships program. If interested please read on as all are welcome to apply and appreciate if you can share this widely. Regards, Save ICANN --snip-- Application Round Opens for Nairobi Meeting Fellowships Program ensures global representation at ICANN's International Public Meetings 29 September 2009 MARINA DEL REY, Calif.: The Internet Corporation for Assigned Names and Numbers has launched the ninth round of fellowship program applications for its 37th International Public Meeting to be held in Nairobi, Kenya from 7-12 March 2009. "Just like the Internet, ICANN is global in scope in its operations," said Theresa Swinehart , ICANN's Vice President, Global and Strategic Partnerships. "Our fellowship program, through the contribution of alumni from the previous 7 meetings, continues to experience success in making sure global voices are heard in the wide variety of public forums that it holds." For the upcoming Seoul Meeting, there are 35 fellows selected from 27 countries, chosen from 132 applications received. 10 of the fellows are alumni from at least one of the past seven programmes; 21 fellows are first-time attendees to any ICANN meeting and 4 have attended past meetings, but are first time fellows. Priority is given to applicants who are current residents of developing and least developed nations and interested in participating in ICANN and its supporting organizations, such as the Governmental Advisory Committee, the Country Code Names Supporting Organization, and the Generic Names Supporting Organization. The fellowship will assist in covering airfare, hotel and a stipend. Recipients will be expected to actively participate in and contribute to ICANN processes. As always, registration for ICANN's meetings is free for anyone wanting to attend. Applications for the meeting in Nairobi will be accepted from now until 1200 PDT (UTC -7) on 6 November 2009. More information, as well as a link to the application for a fellowship, is available online at: http://www.icann.org/en/fellowships/

12 years, 9 months

2/8 and 46/8 allocated to the RIPE NCC

by Leo Vegoda

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, The IANA IPv4 registry has been updated to reflect the allocation of two /8 IPv4 blocks to the RIPE NCC in September 2009: 2/8 and 46/8. You can find the IANA IPv4 registry at: http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.txt Please update your filters as appropriate. The IANA free pool contains 26 unallocated unicast IPv4 /8s. Regards, Leo Vegoda Number Resources Manager, IANA -----BEGIN PGP SIGNATURE----- Version: 9.10.0.500 wj8DBQFKt6AdvBLymJnAzRwRAiscAKDaqyQYv8YLcXsg/tubUBe1THTNIACfQ0iP 23SVpODdlrWi0qEuEHVbi5c= =DVak -----END PGP SIGNATURE-----

12 years, 9 months

AusCERT Week in Review - Week Ending 18/09/2009 (AUSCERT#20073f686)

by Daniel McNamara

Greetings all, In an interesting followup to last weeks release of Firefox 3.5.3 it was shown that quite a large number of users are running outdated versions of Flash. A new feature in Firefox 3.5.3 was a helper component which checked the users Flash plugin version and informed them that they may wish to upgrade to avoid security issues. It seems this feature is working quite well and Mozilla have provided the metric to prove it. [1] Chrome 3 was released this week which fixed some minor issues but was mostly a feature update. As promising as Chrome is looking so far it's still missing a lot of features we would like to see such as the ability to disable JavaScript easily or better still allow/disallow on a per site basis ala the NoScript addon for Firefox. [2] In the server world there is talk of a local privilege escalation issue in NetBSD which has been documented, assigned a CVE and even had a video made showing how it's done. So far there has been no response on the NetBSD site on this issue. [3] Last, but certainly not least, an exploit targeting the unpatched execute arbitrary code flaw in SMB that Microsoft advised about last week has been released. Given the potential for this to be used in a worm this would be a good time to ensure that you prevent SMB access from untrusted machines. Learning lessons from the Conficker worm there is also a good argument for limiting SMB access for trusted machines as well. [4,5] Have a good weekend, Daniel [1] Helping People Upgrade Flash http://blog.mozilla.com/metrics/2009/09/16/helping-people-upgrade-flash/ [2] ASB-2009.1085 https://www.auscert.org.au/render.html?it=11648 [3] Iret #GP on pre-commit handling failure: the NetBSD case (CVE-2009-2793) http://www.cr0.org/misc/CVE-2009-2793.txt [4] ESB-2009.1269.2 http://www.auscert.org.au/render.html?it=11608 [5] SMB2 remote exploit released http://isc.sans.org/diary.html?storyid=7141 -- AusCERT Week in Review 18 September 2009 AusCERT in the Media: --------------------- Papers, Articles and other documents: ------------------------------------- Title: The Internet Industry Association (IIA) has released a draft eSecurity code - public responses invited. Date: 17 September 2009 URL: http://www.auscert.org.au/11658 Title: AusCERT Certificate Service Project Update - September 2009 Date: 14 September 2009 URL: http://www.auscert.org.au/11634 Web Log Entries: ---------------- Alerts, Advisories and Updates: ------------------------------- Title: ASB-2009.1083.2 - UPDATE [Win][UNIX/Linux] PostgreSQL: Multiple vulnerabilities Date: 18 September 2009 URL: http://www.auscert.org.au/11641 Title: ASB-2009.1086 - [Win][UNIX/Linux] wireshark: Denial of service - Remote with user interaction Date: 17 September 2009 URL: http://www.auscert.org.au/11654 Title: ASB-2009.1087 - [Win][Netware][SUSE] Novell GroupWise: Cross-site scripting - Remote/unauthenticated Date: 17 September 2009 URL: http://www.auscert.org.au/11655 Title: ASB-2009.1088 - [Win][UNIX/Linux] Bugzilla: Multiple vulnerabilities Date: 17 September 2009 URL: http://www.auscert.org.au/11656 Title: ASB-2009.1085 - [Win] Google Chrome: Cross-site scripting - Remote with user interaction Date: 16 September 2009 URL: http://www.auscert.org.au/11648 Title: ASB-2009.1082 - [Win][UNIX/Linux] Horde Application Framework/Groupware: Execute arbitrary code/commands - Remote with user interaction Date: 15 September 2009 URL: http://www.auscert.org.au/11640 Title: ASB-2009.1084 - [Win][UNIX/Linux] IBM Tivoli Identity Manager: Cross-site scripting - Remote with user interaction Date: 15 September 2009 URL: http://www.auscert.org.au/11642 Title: ASB-2009.1081 - [Win][Linux][HP-UX][Solaris][AIX] IBM HTTP Server: Denial of service - Remote/unauthenticated Date: 14 September 2009 URL: http://www.auscert.org.au/11633 External Security Bulletins: ---------------------------- Title: ESB-2009.1303 - [RedHat] freeradius: Denial of service - Remote/unauthenticated Date: 18 September 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11659 Title: ESB-2009.1302 - [Solaris][OpenSolaris] Solaris IPv6 Networking Stack: Denial of service - Remote/unauthenticated Date: 17 September 2009 OS: Solaris URL: http://www.auscert.org.au/11657 Title: ESB-2009.1301 - [Solaris][OpenSolaris] pidgin: Execute arbitrary code/commands - Remote/unauthenticated Date: 17 September 2009 OS: Solaris URL: http://www.auscert.org.au/11653 Title: ESB-2009.1300 - [Win][Linux][Solaris][OpenSolaris][Mac][OSX] StarOffice/StarSuite: Execute arbitrary code/commands - Remote with user interaction Date: 17 September 2009 OS: Solaris, Red Hat Linux, Windows 2003, Mac OS X, Debian GNU/Linux, Ubuntu, Windows XP, SUSE, Windows 2000, Windows Vista, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/11652 Title: ESB-2009.1299 - [Win][UNIX/Linux] Drupal third-party modules: Multiple Vulnerabilities Date: 17 September 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, Other BSD Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/11651 Title: ESB-2009.1298 - [Win][UNIX/Linux] Drupal core: Cross-site request forgery - Existing account Date: 17 September 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, Other BSD Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/11650 Title: ESB-2009.1297 - [Debian] icu: Cross-site scripting - Remote/unauthenticated Date: 17 September 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/11649 Title: ESB-2009.1296 - [SUSE] Multiple products: Multiple vulnerabilities Date: 16 September 2009 OS: SUSE URL: http://www.auscert.org.au/11647 Title: ESB-2009.1295 - [HP-UX] bootpd: Denial of service - Remote/unauthenticated Date: 16 September 2009 OS: HP-UX URL: http://www.auscert.org.au/11646 Title: ESB-2009.1294 - [Debian] Ruby on rails: Cross-site scripting - Remote/unauthenticated Date: 16 September 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/11645 Title: ESB-2009.1293 - [Debian] openssl: Reduced security - Remote with user interaction Date: 16 September 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/11644 Title: ESB-2009.1292 - [RedHat] kernel: Multiple vulnerabilities Date: 16 September 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11643 Title: ESB-2009.1291 - [Debian] iceweasel: Multiple vulnerabilities Date: 15 September 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/11639 Title: ESB-2009.1290 - [Debian] xulrunner: Multiple vulnerabilities Date: 15 September 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/11638 Title: ESB-2009.1289 - [Win][UNIX/Linux][Debian] nginx: Execute arbitrary code/commands - Remote/unauthenticated Date: 15 September 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Windows XP, Other BSD Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/11637 Title: ESB-2009.1288 - [UNIX/Linux][Debian] nagios2: Cross-site scripting - Remote/unauthenticated Date: 15 September 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/11636 Title: ESB-2009.1287 - [Appliance][Mac][OSX] Xsan: Read-only data access - Remote with user interaction Date: 15 September 2009 OS: Mac OS X URL: http://www.auscert.org.au/11635 Title: ESB-2009.1286 - [UNIX/Linux] htmldoc: Execute arbitrary code/commands - Remote with user interaction Date: 14 September 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/11632 Title: ESB-2009.1285 - [Debian] devscripts: Reduced security - Existing account Date: 14 September 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/11631 Title: ESB-2009.1284 - [Solaris][OpenSolaris] TCP: Denial of service - Remote/unauthenticated Date: 14 September 2009 OS: Solaris URL: http://www.auscert.org.au/11630 Title: ESB-2009.1283 - [Solaris][OpenSolaris] w(1) Utility: Execute arbitrary code/commands - Existing account Date: 14 September 2009 OS: Solaris URL: http://www.auscert.org.au/11629 Title: ESB-2009.1282 - [Solaris][OpenSolaris] lx branded zones: Denial of service - Existing account Date: 14 September 2009 OS: Solaris URL: http://www.auscert.org.au/11628 Title: ESB-2009.1253.2 - UPDATE [Win] Sun Java System Web Server: Access privileged data - Remote/unauthenticated Date: 14 September 2009 OS: Windows Server 2008, Windows Vista, Windows 2000, Windows XP, Windows 2003, Solaris URL: http://www.auscert.org.au/11584 Title: ESB-2009.0620 -- [Solaris][OpenSolaris] -- Solaris Ghostscript (GS(1)): Execute Arbitrary Code Date: 15 September 2009 OS: Solaris URL: http://www.auscert.org.au/11226

12 years, 9 months

Linux Conference Australia, in New Zealand, January 2010 - Fellowship programme / Travel assistance

by Keith Davidson

Hello all, As I advised at the PacINET meeting in Papua New Guinea, the annual Linux conference normally held in Australia will be held in Wellington New Zealand from 18 to 23 January 2010. InternetNZ is a major sponsor of this meeting and therefore is through the PIP programme, working to ensure suitably qualified Linux users from the Pacific have an opportunity to attend this conference and we offer some fellowships to assist with travel and attendance expenses. Please note that this is a very technically focussed event and will only be of value to experienced Linux users / programmers / developers. Please see www.lca.org.nz for overall details of the event, or www.lca2010.org.nz/media/news/89 for the specific fellowship opportunities. Please also be encouraged to pass this information on to any Linux geeks you know. Regards Keith Davidson

12 years, 9 months

ANNOUNCEMENT: APRICOT 2010 FELLOWSHIPS NOW OPEN

by Srinivas (Sunny) Chendi

17 September 2009 ANNOUNCEMENT: APRICOT 2010 FELLOWSHIPS NOW OPEN The annual APRICOT conference is a unique and successful educational forum for Internet builders in the Asia-Pacific region, to learn from their peers and from leaders in the Internet community. Senior practitioners from the Asia Pacific and around the world contribute their time to APRICOT as presenters, teachers and trainers, to produce a non-commercial conference of consistently high quality. Since 2000, APRICOT has incorporated a Fellowship Program to provide opportunities to developing country personnel to participate in APRICOT. The Program provides financial assistance to selected applicants to cover some of the expenses associated with attending the conference. For the year 2010, the APRICOT Fellowship Award Package will include a partial airfare travel subsidy, registration for all tutorial and conference sessions, accommodation and and a daily expense allowance. For more information, please see: http://www.apricot2010.net/fellowship The APRICOT 2010 Fellowship Committee now cordially invites applications for fellowship funding to participate in APRICOT 2010 in Kuala Lumpur, from 23 February to 5 March 2010. To apply, follow the link above. PLEASE NOTE: the deadline for this first round of applications is 30 September 2009. A second round of applications may be opened if funding permits. With best regards, Paul Wilson Director General, APNIC on behalf of the APRICOT 2010 Fellowship Committee

12 years, 9 months

IPv6 Deployment Monitoring Survey

by Elly Tawhai

Hi there! APNIC is now conducting our "IPv6 Deployment Monitoring Survey". It'd be great if you could spend about 15 minutes to complete the survey. The survey closes on 28 September 2009. Survey results will be presented at RIPE59 in October 2009. We will also publish the survey analysis and results as soon as they become available on the APNIC website. We also intend to present it at APNIC 29 in February 2010. Let's find out about the global status of IPv6 deployment! Please visit: http://www.surveymonkey.com/s.aspx?sm=YahORYFZHoqKo2Kc8R1R4Q_3d_3d Apologies if you have received more than one copy of this email. Thank you! Kind regards, Elly ------------------------------------------------------------------------ Elly Tawhai email: elly(a)apnic.net Senior Internet Resource Analyst/ sip: elly(a)voip.apnic.net Liaison Officer(Pacific), APNIC phone: +61 7 3858 3188 http://www.apnic.net fax: +61 7 3858 3199 ------------------------------------------------------------------------

12 years, 9 months

AusCERT Week in Review - Week Ending 11/09/2009 (AUSCERT#20073F686)

by Richard Billington

Greetings All, Well nothing much happened this week. Just your normal almost patch free week. Although there were a few patches from Apple who have released 10.6.1 only 2 weeks after releasing 10.6. As well as security updates for 10.5.8 AND 10.4.11. [1, 2] Apple also released iPhone OS 3.1 (or 3.1.1 if you are using an iPod Touch). Which also requires the update to iTunes 9, and in turn it seems that iTunes 9 requires the use of Safari. [3, 4, 5] Come to think of it, there was also a new Firefox released (3.5.3 and 3.0.14), correcting a world of hurt. [6] There was also a TCP vulnerability that essentially means if you can do a TCP handshake, you can cause a DoS. [7] And I think I remember some Microsoft patches correcting a number of problems. One of which looked a little interesting. CVE-2009-1925 in MS09-048 seems to allow remove code execution if the server has an open port. So if I understand this correctly, this would make every Windows server vulnerable. I am quite glad this was patched before we say any worms using it. [8] So, come to think of it, there was actually quite a bit going on this week. Have a good weekend. Richard [1] ESB-2009.1280 http://www.auscert.org.au/render.html?it=11624 [2] ESB-2009.1281 http://www.auscert.org.au/render.html?it=11625 [3] ESB-2009.1274 http://www.auscert.org.au/render.html?it=11616 [4] ESB-2009.1275 http://www.auscert.org.au/render.html?it=11617 [5] iTunes and Safari: Joined at the Hip | Cult of Mac http://www.cultofmac.com/itunes-and-safari-joined-at-the-hip/16098 [6] ASB-2009.1078 http://www.auscert.org.au/render.html?it=11618 [7] ESB-2009.1236 http://www.auscert.org.au/render.html?it=11564 [8] ESB-2009.1267 http://www.auscert.org.au/render.html?it=11606 AusCERT Week in Review 11 September 2009 AusCERT in the Media: - - --------------------- Papers, Articles and other documents: - - ------------------------------------- Web Log Entries: - - ---------------- Title: Increased port 445 scanning/SMB 0Day Date: 09 September 2009 URL: http://www.auscert.org.au/11613 Alerts, Advisories and Updates: - - ------------------------------- Title: ASB-2009.1080 - [UNIX/Linux] FreeRADIUS 1.1.7 and prior: Denial of service - Remote/unauthenticated Date: 11 September 2009 URL: http://www.auscert.org.au/11626 Title: ASB-2009.1078 - ALERT [Win][UNIX/Linux] Firefox: Multiple vulnerabilities Date: 10 September 2009 URL: http://www.auscert.org.au/11618 Title: ASB-2009.1079 - [Win][Linux][HP-UX][Solaris][AIX] Hitachi: Execute arbitrary code/commands - Remote/unauthenticated Date: 10 September 2009 URL: http://www.auscert.org.au/11623 Title: ASB-2009.1076 - [Appliance] Xerox WorkCentre: Denial of service - Remote/unauthenticated Date: 08 September 2009 URL: http://www.auscert.org.au/11599 Title: ASB-2009.1077 - [Win] Microsoft Bulletin Notification - September Pre-release Announcement Date: 08 September 2009 URL: http://www.auscert.org.au/11600 Title: ASB-2009.1074 - [Win][UNIX/Linux] DotNetNuke: Cross-site scripting - Remote/unauthenticated Date: 07 September 2009 URL: http://www.auscert.org.au/11595 Title: ASB-2009.1075 - [Win][UNIX/Linux] Ruby on Rails: Cross-site scripting - Remote/unauthenticated Date: 07 September 2009 URL: http://www.auscert.org.au/11597 External Security Bulletins: - - ---------------------------- Title: ESB-2009.1281 - [Mac][OSX] Apple: Multiple vulnerabilities Date: 11 September 2009 OS: Mac OS X URL: http://www.auscert.org.au/11625 Title: ESB-2009.1280 - [Mac][OSX] Flash Player plug-in: Execute arbitrary code/commands - Remote with user interaction Date: 11 September 2009 OS: Mac OS X URL: http://www.auscert.org.au/11624 Title: ESB-2009.1279 - [UNIX/Linux][Debian] nagios2: Cross-site scripting - Remote/unauthenticated Date: 10 September 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/11622 Title: ESB-2009.1278 - [Win][UNIX/Linux][Debian] xapian-omega: Cross-site scripting - Remote/unauthenticated Date: 10 September 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Windows XP, Other BSD Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/11621 Title: ESB-2009.1277 - [RedHat] Seamonkey: Multiple vulnerabilities Date: 10 September 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11620 Title: ESB-2009.1276 - ALERT [RedHat] Firefox: Multiple vulnerabilities Date: 10 September 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11619 Title: ESB-2009.1275 - ALERT [Win][Mac][OSX] Quicktime: Multiple vulnerabilities Date: 10 September 2009 OS: Windows XP, Windows 7, Windows Vista, Mac OS X URL: http://www.auscert.org.au/11617 Title: ESB-2009.1274.2 - UPDATE ALERT [Appliance][Mac][OSX] iPhone/iPod touch: Multiple vulnerabilities Date: 10 September 2009 OS: Mac OS X URL: http://www.auscert.org.au/11616 Title: ESB-2009.1273 - [UNIX/Linux] qt4: Provide misleading information - Remote/unauthenticated Date: 09 September 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/11612 Title: ESB-2009.1272 - [RedHat] xmlsec1: Provide misleading information - Remote/unauthenticated Date: 09 September 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11611 Title: ESB-2009.1271 - [RedHat] fetchmail: Multiple vulnerabilities Date: 09 September 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/11610 Title: ESB-2009.1270 - ALERT [Cisco] Cisco Systems: Denial of service - Remote/unauthenticated Date: 09 September 2009 OS: Cisco Products URL: http://www.auscert.org.au/11609 Title: ESB-2009.1269.2 - UPDATE ALERT [Win] SMB: Execute arbitrary code/commands - Remote/unauthenticated Date: 09 September 2009 OS: Windows Server 2008, Windows Vista URL: http://www.auscert.org.au/11608 Title: ESB-2009.1268 - ALERT [Win] Wireless LAN AutoConfig Service: Execute arbitrary code/commands - Remote/unauthenticated Date: 09 September 2009 OS: Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/11607 Title: ESB-2009.1267.2 - UPDATED ALERT [Win] Windows TCP/IP: Multiple vulnerabilities Date: 10 September 2009 OS: Windows Server 2008, Windows Vista, Windows 2000, Windows XP, Windows 2003 URL: http://www.auscert.org.au/11606 Title: ESB-2009.1266.2 - UPDATED ALERT [Win] Windows Media Format (WMF): Execute arbitrary code/commands - Remote with user interaction Date: 09 September 2009 OS: Windows Server 2008, Windows Vista, Windows 2000, Windows XP, Windows 2003 URL: http://www.auscert.org.au/11604 Title: ESB-2009.1265 - ALERT [Win] DHTML Editing Component ActiveX control: Execute arbitrary code/commands - Remote with user interaction Date: 09 September 2009 OS: Windows 2003, Windows XP, Windows 2000 URL: http://www.auscert.org.au/11603 Title: ESB-2009.1264 - ALERT [Win] JScript: Execute arbitrary code/commands - Remote with user interaction Date: 09 September 2009 OS: Windows 2003, Windows XP, Windows 2000, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/11602 Title: ESB-2009.1263 - ALERT [Win][UNIX/Linux][Appliance][Juniper][Cisco][RedHat] TCP Protocol: Denial of service - Remote/unauthenticated Date: 09 September 2009 OS: Windows 2003, Cisco Products, Red Hat Linux, Ubuntu, Debian GNU/Linux, Windows XP, SUSE, Windows 2000, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/11601 Title: ESB-2009.1262 - [UNIX/Linux][Debian] cyrus-imapd-2.2: Increased privileges - Existing account Date: 08 September 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/11598 Title: ESB-2009.1261 - [Win] VMware: Execute arbitrary code/commands - Remote with user interaction Date: 07 September 2009 OS: Windows 2003, Windows XP, Windows 2000, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/11596 Title: ESB-2009.1260 - [Solaris][OpenSolaris] libxml2: Denial of service - Remote with user interaction Date: 07 September 2009 OS: Solaris URL: http://www.auscert.org.au/11594 Title: ESB-2009.1259 - [UNIX/Linux][Debian] silc-client/silc-toolkit: Multiple vulnerabilities Date: 07 September 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/11593 Title: ESB-2009.1258 - [Debian] openoffice.org: Multiple vulnerabilities Date: 07 September 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/11592 Title: ESB-2009.1257 - [Win][UNIX/Linux][RedHat] OpenOffice.org: Multiple vulnerabilities Date: 07 September 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, Other BSD Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/11591 Title: ESB-2009.1235.3 - UPDATE [Win] Microsoft Internet Information Server: Denial of service - Remote/unauthenticated Date: 07 September 2009 OS: Windows Server 2008, Windows Vista, Windows 2000, Windows XP, Windows 2003 URL: http://www.auscert.org.au/11563 Title: ESB-2009.1021.3 - UPDATE [Solaris][OpenSolaris] SNMP daemon (snmpd(1M)): Denial of service - Remote/unauthenticated Date: 09 September 2009 OS: Solaris URL: http://www.auscert.org.au/11255 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ===========================================================================

12 years, 9 months

Block of AS Numbers allocated to APNIC

by Leo Vegoda

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, The IANA AS Numbers registry has been updated to reflect the allocation of a block of AS Numbers to APNIC. 55296-56319 Assigned by APNIC whois.apnic.net 2009-09-02 The registry can be found at: http://www.iana.org/assignments/as-numbers/as-numbers.xml http://www.iana.org/assignments/as-numbers/as-numbers.xhtml http://www.iana.org/assignments/as-numbers/as-numbers.txt Regards, Leo Vegoda Number Resources Manager, IANA -----BEGIN PGP SIGNATURE----- Version: 9.10.0.500 wj4DBQFKpohJvBLymJnAzRwRAncHAJiRWENmmK+qwpvAZIaPrs/urIa/AJ9f1A05 PM9TJWxzbAxpSiXyIgzvfA== =MGZ2 -----END PGP SIGNATURE-----

12 years, 10 months

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

pacnog September 2009