pacnog September 2010

pacnog@pacnog.org

12 participants
16 discussions

by noreply＠apnic.net

Dear Subscriber, This is the monthly reminder of subscription information for the pacnog list, hosted at APNIC. For subscription information including how to un-subscribe go to http://mailman.apnic.net/mailman/listinfo/pacnog Thank you for participating in this discussion. Kind Regards, List administrator

11 years, 9 months

Google Safebrowsing alerts

by Zane Jarvis

Hi all, Google has just announced that ASN owners can now receive notifications of sites they believe to be compromised directly from them. http://googleonlinesecurity.blogspot.com/2010/09/safe-browsing-alerts-for-n… ork.html http://safebrowsingalerts.googlelabs.com/ I hope you find this helpful. Regards, Zane. -- Zane Jarvis Senior Information Security Analyst | Hotline: +61 7 3365 4417 AusCERT, Australia's Leading CERT | Fax: +61 7 3365 7031 The University of Queensland | WWW: www.auscert.org.au QLD 4072 Australia | Email: auscert(a)auscert.org.au

11 years, 9 months

Weekly Routing Table Report

by Routing Analysis Role Account

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 25 Sep, 2010 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 331883 Prefixes after maximum aggregation: 152525 Deaggregation factor: 2.18 Unique aggregates announced to Internet: 161648 Total ASes present in the Internet Routing Table: 34863 Prefixes per ASN: 9.52 Origin-only ASes present in the Internet Routing Table: 30227 Origin ASes announcing only one prefix: 14677 Transit ASes present in the Internet Routing Table: 4636 Transit-only ASes present in the Internet Routing Table: 101 Average AS path length visible in the Internet Routing Table: 3.7 Max AS path length visible: 24 Max AS path prepend of ASN (41664) 21 Prefixes from unregistered ASNs in the Routing Table: 3160 Unregistered ASNs in the Routing Table: 1399 Number of 32-bit ASNs allocated by the RIRs: 794 Prefixes from 32-bit ASNs in the Routing Table: 1017 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 228 Number of addresses announced to Internet: 2273798848 Equivalent to 135 /8s, 135 /16s and 106 /24s Percentage of available address space announced: 61.3 Percentage of allocated address space announced: 65.5 Percentage of available address space allocated: 93.7 Percentage of address space in use by end-sites: 84.9 Total number of prefixes smaller than registry allocations: 156837 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 80968 Total APNIC prefixes after maximum aggregation: 27719 APNIC Deaggregation factor: 2.92 Prefixes being announced from the APNIC address blocks: 77853 Unique aggregates announced from the APNIC address blocks: 32742 APNIC Region origin ASes present in the Internet Routing Table: 4196 APNIC Prefixes per ASN: 18.55 APNIC Region origin ASes announcing only one prefix: 1167 APNIC Region transit ASes present in the Internet Routing Table: 648 Average APNIC Region AS path length visible: 3.7 Max APNIC Region AS path length visible: 15 Number of APNIC addresses announced to Internet: 551901216 Equivalent to 32 /8s, 229 /16s and 88 /24s Percentage of available APNIC address space announced: 78.3 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 55296-56319, 131072-132095 APNIC Address Blocks 1/8, 14/8, 27/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 135903 Total ARIN prefixes after maximum aggregation: 70118 ARIN Deaggregation factor: 1.94 Prefixes being announced from the ARIN address blocks: 108637 Unique aggregates announced from the ARIN address blocks: 43091 ARIN Region origin ASes present in the Internet Routing Table: 13925 ARIN Prefixes per ASN: 7.80 ARIN Region origin ASes announcing only one prefix: 5334 ARIN Region transit ASes present in the Internet Routing Table: 1380 Average ARIN Region AS path length visible: 3.4 Max ARIN Region AS path length visible: 22 Number of ARIN addresses announced to Internet: 734124576 Equivalent to 43 /8s, 193 /16s and 218 /24s Percentage of available ARIN address space announced: 62.5 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 76059 Total RIPE prefixes after maximum aggregation: 44153 RIPE Deaggregation factor: 1.72 Prefixes being announced from the RIPE address blocks: 69455 Unique aggregates announced from the RIPE address blocks: 45623 RIPE Region origin ASes present in the Internet Routing Table: 14816 RIPE Prefixes per ASN: 4.69 RIPE Region origin ASes announcing only one prefix: 7631 RIPE Region transit ASes present in the Internet Routing Table: 2237 Average RIPE Region AS path length visible: 3.9 Max RIPE Region AS path length visible: 24 Number of RIPE addresses announced to Internet: 439384960 Equivalent to 26 /8s, 48 /16s and 123 /24s Percentage of available RIPE address space announced: 77.0 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 196608-197631 RIPE Address Blocks 2/8, 25/8, 31/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 176/8, 178/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 30249 Total LACNIC prefixes after maximum aggregation: 7285 LACNIC Deaggregation factor: 4.15 Prefixes being announced from the LACNIC address blocks: 28745 Unique aggregates announced from the LACNIC address blocks: 15259 LACNIC Region origin ASes present in the Internet Routing Table: 1354 LACNIC Prefixes per ASN: 21.23 LACNIC Region origin ASes announcing only one prefix: 422 LACNIC Region transit ASes present in the Internet Routing Table: 232 Average LACNIC Region AS path length visible: 4.0 Max LACNIC Region AS path length visible: 19 Number of LACNIC addresses announced to Internet: 75452800 Equivalent to 4 /8s, 127 /16s and 81 /24s Percentage of available LACNIC address space announced: 56.2 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 181/8, 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 7427 Total AfriNIC prefixes after maximum aggregation: 1881 AfriNIC Deaggregation factor: 3.95 Prefixes being announced from the AfriNIC address blocks: 5745 Unique aggregates announced from the AfriNIC address blocks: 1675 AfriNIC Region origin ASes present in the Internet Routing Table: 404 AfriNIC Prefixes per ASN: 14.22 AfriNIC Region origin ASes announcing only one prefix: 123 AfriNIC Region transit ASes present in the Internet Routing Table: 93 Average AfriNIC Region AS path length visible: 3.8 Max AfriNIC Region AS path length visible: 17 Number of AfriNIC addresses announced to Internet: 20374016 Equivalent to 1 /8s, 54 /16s and 226 /24s Percentage of available AfriNIC address space announced: 60.7 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 1859 9436 501 Korea Telecom (KIX) 7545 1395 297 83 TPG Internet Pty Ltd 4755 1348 368 160 TATA Communications formerly 17488 1347 155 124 Hathway IP Over Cable Interne 17974 1240 299 70 PT TELEKOMUNIKASI INDONESIA 24560 1036 304 177 Bharti Airtel Ltd., Telemedia 9583 1015 75 488 Sify Limited 4808 932 1714 261 CNCGROUP IP network: China169 18101 883 100 132 Reliance Infocom Ltd Internet 9829 823 692 33 BSNL National Internet Backbo Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3780 3667 278 bellsouth.net, inc. 4323 2708 1107 388 Time Warner Telecom 19262 1818 4676 286 Verizon Global Networks 1785 1797 698 132 PaeTec Communications, Inc. 20115 1494 1531 652 Charter Communications 7018 1461 5747 947 AT&T WorldNet Services 6478 1352 275 123 AT&T Worldnet Services 2386 1293 554 912 AT&T Data Communications Serv 11492 1207 229 85 Cable One 22773 1195 2858 61 Cox Communications, Inc. Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 3292 447 2026 388 TDC Tele Danmark 30890 442 99 211 Evolva Telecom 8866 405 117 19 Bulgarian Telecommunication C 702 404 1868 318 UUNET - Commercial IP service 8551 402 353 46 Bezeq International 3301 378 1688 333 TeliaNet Sweden 34984 376 90 185 BILISIM TELEKOM 3320 373 7328 323 Deutsche Telekom AG 12479 361 576 5 Uni2 Autonomous System 31148 349 18 75 FreeNet ISP Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1341 2559 367 UniNet S.A. de C.V. 10620 1319 247 148 TVCABLE BOGOTA 28573 1114 869 108 NET Servicos de Comunicao S.A 7303 809 424 103 Telecom Argentina Stet-France 6503 746 223 258 AVANTEL, S.A. 14420 580 38 76 CORPORACION NACIONAL DE TELEC 22047 558 310 15 VTR PUNTO NET S.A. 3816 482 209 95 Empresa Nacional de Telecomun 7738 477 922 30 Telecomunicacoes da Bahia S.A 11172 444 99 76 Servicios Alestra S.A de C.V Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1129 445 10 TEDATA 24863 728 147 39 LINKdotNET AS number 36992 660 279 178 Etisalat MISR 3741 266 906 224 The Internet Solution 6713 203 199 12 Itissalat Al-MAGHRIB 29571 202 19 11 Ci Telecom Autonomous system 2018 197 277 64 Tertiary Education Network 33776 197 12 14 Starcomms Nigeria Limited 24835 165 78 9 RAYA Telecom - Egypt 16637 154 440 92 MTN Network Solutions Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3780 3667 278 bellsouth.net, inc. 4323 2708 1107 388 Time Warner Telecom 4766 1859 9436 501 Korea Telecom (KIX) 19262 1818 4676 286 Verizon Global Networks 1785 1797 698 132 PaeTec Communications, Inc. 20115 1494 1531 652 Charter Communications 7018 1461 5747 947 AT&T WorldNet Services 7545 1395 297 83 TPG Internet Pty Ltd 6478 1352 275 123 AT&T Worldnet Services 4755 1348 368 160 TATA Communications formerly Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 2708 2320 Time Warner Telecom 1785 1797 1665 PaeTec Communications, Inc. 19262 1818 1532 Verizon Global Networks 4766 1859 1358 Korea Telecom (KIX) 7545 1395 1312 TPG Internet Pty Ltd 6478 1352 1229 AT&T Worldnet Services 17488 1347 1223 Hathway IP Over Cable Interne 4755 1348 1188 TATA Communications formerly 10620 1319 1171 TVCABLE BOGOTA 17974 1240 1170 PT TELEKOMUNIKASI INDONESIA Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 11946 UNALLOCATED 8.12.155.0/24 40913 Quality Technology S 15040 UNALLOCATED 8.12.156.0/24 3356 Level 3 Communicatio 33084 UNALLOCATED 8.15.195.0/24 3356 Level 3 Communicatio 18826 UNALLOCATED 8.17.208.0/20 2828 XO Communications 16734 UNALLOCATED 8.18.204.0/24 26914 Global Netoptex, Inc 53562 UNALLOCATED 8.19.94.0/24 3356 Level 3 Communicatio 22015 UNALLOCATED 8.22.137.0/24 14989 Broadview Networks 46856 UNALLOCATED 8.22.184.0/22 3356 Level 3 Communicatio 21893 UNALLOCATED 8.26.33.0/24 3356 Level 3 Communicatio 26169 UNALLOCATED 8.225.177.0/24 20225 TelJet Complete listing at http://thyme.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 31.0.0.0/16 12654 RIPE NCC RIS Project 31.1.0.0/21 12654 RIPE NCC RIS Project 31.1.24.0/24 12654 RIPE NCC RIS Project 41.222.79.0/24 36938 >>UNKNOWN<< 41.223.92.0/22 36936 >>UNKNOWN<< 41.223.196.0/24 36990 Alkan Telecom Ltd 41.223.197.0/24 36990 Alkan Telecom Ltd 41.223.198.0/24 36990 Alkan Telecom Ltd 41.223.199.0/24 36990 Alkan Telecom Ltd 46.20.80.0/20 5602 KPNQwest Italia S.p.a Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:20 /9:10 /10:25 /11:67 /12:202 /13:420 /14:730 /15:1318 /16:11289 /17:5447 /18:9267 /19:18479 /20:23532 /21:23780 /22:31095 /23:30369 /24:172749 /25:1048 /26:1163 /27:646 /28:170 /29:47 /30:3 /31:0 /32:7 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6389 2407 3780 bellsouth.net, inc. 4766 1476 1859 Korea Telecom (KIX) 4323 1367 2708 Time Warner Telecom 1785 1259 1797 PaeTec Communications, Inc. 10620 1207 1319 TVCABLE BOGOTA 11492 1099 1207 Cable One 17488 1087 1347 Hathway IP Over Cable Interne 18566 1068 1087 Covad Communications 8452 1029 1129 TEDATA 24560 937 1036 Bharti Airtel Ltd., Telemedia Complete listing at http://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:72 2:13 4:13 8:310 12:2012 13:8 14:9 15:20 16:3 17:9 20:8 24:1365 27:345 31:1 32:61 33:12 38:702 40:97 41:2519 44:3 46:97 47:10 49:4 52:12 55:5 56:2 57:30 58:867 59:505 60:477 61:1080 62:1049 63:1964 64:3715 65:2305 66:4025 67:1841 68:1136 69:2800 70:739 71:374 72:1959 73:2 74:2312 75:285 76:318 77:873 78:645 79:418 80:1021 81:798 82:498 83:454 84:680 85:1035 86:431 87:688 88:314 89:1574 90:98 91:3061 92:429 93:995 94:1167 95:703 96:397 97:219 98:634 99:32 101:3 108:64 109:711 110:430 111:579 112:297 113:284 114:452 115:594 116:1102 117:659 118:526 119:881 120:158 121:709 122:1541 123:923 124:1222 125:1241 128:226 129:157 130:168 131:558 132:259 133:19 134:207 135:46 136:223 137:138 138:274 139:109 140:478 141:197 142:346 143:351 144:479 145:54 146:428 147:171 148:629 149:305 150:152 151:233 152:288 153:171 154:3 155:366 156:170 157:335 158:111 159:362 160:315 161:189 162:268 163:165 164:414 165:368 166:468 167:409 168:677 169:156 170:724 171:62 172:2 173:1052 174:531 175:171 176:1 177:1 178:498 180:654 181:1 182:210 183:254 184:160 186:647 187:469 188:819 189:786 190:4156 192:5779 193:4739 194:3430 195:2822 196:1200 198:3552 199:3594 200:5397 201:1583 202:8111 203:8288 204:3995 205:2394 206:2554 207:3054 208:3885 209:3492 210:2582 211:1301 212:1773 213:1684 214:674 215:66 216:4753 217:1579 218:473 219:399 220:1176 221:389 222:314 223:42 End of report

11 years, 9 months

AusCERT Week in Review - Week Ending 24/09/2010 (AUSCERT#20073f686)

by Patrick Mannion

AusCERT Week in Review 24 September 2010 AusCERT in the Media: --------------------- Papers, Articles and other documents: ------------------------------------- Title: New version of Shibboleth 2.2.0 Date: 24 September 2010 URL: http://www.auscert.org.au/13395 Title: New public vulnerability in Microsoft ASP.NET with workarounds. Date: 18 September 2010 URL: http://www.auscert.org.au/13367 Web Log Entries: ---------------- Title: OpenX - website revenue, or website regret? Date: 23 September 2010 URL: http://www.auscert.org.au/13386 Alerts, Advisories and Updates: ------------------------------- Title: ASB-2010.0215 - [Win] Alcatel-Lucent OmniTouch CCAgent: Denial of service - Remote/unauthenticated Date: 22 September 2010 URL: http://www.auscert.org.au/13384 Title: ASB-2010.0216.2 - UPDATE [Win][Linux][HP-UX][Solaris][AIX] IBM WebSphere Application Server 6.1: Denial of service - Remote with user interaction Date: 22 September 2010 URL: http://www.auscert.org.au/13385 Title: ASB-2010.0214 - ALERT [Win] Microsoft ASP.NET Date: 21 September 2010 URL: http://www.auscert.org.au/13374 External Security Bulletins: ---------------------------- Title: ESB-2010.0869 - [Win][Linux] HP System Management Homepage (SMH): Access confidential data - Remote/unauthenticated Date: 24 September 2010 OS: Windows 2003, Red Hat Linux, Windows 7, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, SUSE, Windows 2000, Windows Vista, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13399 Title: ESB-2010.0868 - [Win][Linux] HP System Management Homepage (SMH): Provide misleading information - Remote with user interaction Date: 24 September 2010 OS: Windows 2003, Red Hat Linux, Windows 7, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, SUSE, Windows 2000, Windows Vista, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13398 Title: ESB-2010.0867 - [Win][Linux] HP System Management Homepage (SMH) : Provide misleading information - Remote/unauthenticated Date: 24 September 2010 OS: Windows 2003, Red Hat Linux, Windows 7, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, SUSE, Windows 2000, Windows Vista, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13397 Title: ESB-2010.0866 - [Win][RedHat][HP-UX][Solaris] HP OpenView Network Node Manager (OV NNM): Denial of service - Remote/unauthenticated Date: 24 September 2010 OS: Solaris, Red Hat Linux, Windows 2003, HP-UX, Windows XP, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13396 Title: ESB-2010.0865 - [Win][UNIX/Linux] RSA Authentication Agent 7.0 for Web: Access confidential data - Remote/unauthenticated Date: 23 September 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, Other BSD Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/13394 Title: ESB-2010.0864 - [RedHat] kernel-2.6.18: Increased privileges - Existing account Date: 23 September 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13393 Title: ESB-2010.0863 - [Cisco] Cisco IOS Software NAT: Denial of service - Remote/unauthenticated Date: 23 September 2010 OS: Cisco Products URL: http://www.auscert.org.au/13392 Title: ESB-2010.0862 - [Cisco] Cisco IOS Software Internet Group Management Protocol: Denial of service - Remote/unauthenticated Date: 23 September 2010 OS: Cisco Products URL: http://www.auscert.org.au/13391 Title: ESB-2010.0861 - [Cisco] Cisco IOS Software H.323: Denial of service - Remote/unauthenticated Date: 23 September 2010 OS: Cisco Products URL: http://www.auscert.org.au/13390 Title: ESB-2010.0860 - [Cisco] Cisco IOS Software Session Initiation Protocol: Denial of service - Remote/unauthenticated Date: 23 September 2010 OS: Cisco Products URL: http://www.auscert.org.au/13389 Title: ESB-2010.0859 - [Cisco] Cisco IOS SSL VPN: Denial of service - Remote/unauthenticated Date: 23 September 2010 OS: Cisco Products URL: http://www.auscert.org.au/13388 Title: ESB-2010.0858 - [Cisco] Cisco Unified Communications Manager: Denial of service - Remote/unauthenticated Date: 23 September 2010 OS: Cisco Products URL: http://www.auscert.org.au/13387 Title: ESB-2010.0857 - [SUSE] SUSE: Unauthorised access - Unknown/unspecified Date: 22 September 2010 OS: SUSE URL: http://www.auscert.org.au/13383 Title: ESB-2010.0856 - [RedHat] flash-plugin: Execute arbitrary code/commands - Remote with user interaction Date: 22 September 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13382 Title: ESB-2010.0855 - [RedHat] kernel: Increased privileges - Existing account Date: 22 September 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13381 Title: ESB-2010.0854 - [RedHat] bzip2: Execute arbitrary code/commands - Remote with user interaction Date: 21 September 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13380 Title: ESB-2010.0853 - [Win][UNIX/Linux] OTRS 2.4.x, OTRS 2.3.x: Denial of service - Remote/unauthenticated Date: 21 September 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Windows 2003, Red Hat Linux, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, Windows XP, HP-UX, Other BSD Variants, SUSE, Windows 2000, OpenBSD, AIX, Windows Vista, FreeBSD, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13379 Title: ESB-2010.0852 - ALERT [Win][UNIX/Linux] US-CERT: Adobe Flash Vulnerabilities Date: 21 September 2010 OS: HP Tru64 UNIX, Solaris, IRIX, OpenBSD, Other BSD Variants, FreeBSD, HP-UX, SUSE, Ubuntu, Debian GNU/Linux, Other Linux Variants, Red Hat Linux, AIX, Windows 7, Windows Server 2008, Windows Vista, Windows 2003, Windows 2000, Windows XP, Mac OS X URL: http://www.auscert.org.au/13378 Title: ESB-2010.0851 - [FreeBSD] bzip2: Execute arbitrary code/commands - Remote/unauthenticated Date: 21 September 2010 OS: FreeBSD URL: http://www.auscert.org.au/13377 Title: ESB-2010.0850 - [Linux][Debian] bzip2: Execute arbitrary code/commands - Existing account Date: 21 September 2010 OS: Red Hat Linux, Debian GNU/Linux, Ubuntu, SUSE, Other Linux Variants URL: http://www.auscert.org.au/13375 Title: ESB-2010.0849 - [Win][UNIX/Linux][Debian] drupal6: Multiple vulnerabilities Date: 21 September 2010 OS: Red Hat Linux, Solaris, HP Tru64 UNIX, IRIX, Windows 2003, Windows 7, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Windows XP, Other BSD Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/13373 Title: ESB-2010.0848 - [Mac][OSX] AFP Server: Access confidential data - Remote/unauthenticated Date: 21 September 2010 OS: Mac OS X URL: http://www.auscert.org.au/13372 Title: ESB-2010.0847 - [Linux] linux-2.6: Multiple vulnerabilities Date: 20 September 2010 OS: Red Hat Linux, SUSE, Other Linux Variants, Debian GNU/Linux, Ubuntu URL: http://www.auscert.org.au/13370 Title: ESB-2010.0846 - [UNIX/Linux][Debian] squid3: Denial of service - Remote/unauthenticated Date: 20 September 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/13369 Title: ESB-2010.0845 - [Debian] xulrunner: Multiple vulnerabilities Date: 20 September 2010 OS: Debian GNU/Linux URL: http://www.auscert.org.au/13368 Title: ESB-2010.0842.2 - UPDATE [Win][Linux] HP System Management Homepage: Multiple vulnerabilities Date: 20 September 2010 OS: Windows Server 2008, Other Linux Variants, Windows Vista, Windows 2000, SUSE, Windows XP, Ubuntu, Debian GNU/Linux, Windows 7, Red Hat Linux, Windows 2003 URL: http://www.auscert.org.au/13359 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ===========================================================================

11 years, 9 months

Weekly Routing Table Report

by Routing Analysis Role Account

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 18 Sep, 2010 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 331135 Prefixes after maximum aggregation: 152252 Deaggregation factor: 2.17 Unique aggregates announced to Internet: 162663 Total ASes present in the Internet Routing Table: 34823 Prefixes per ASN: 9.51 Origin-only ASes present in the Internet Routing Table: 30197 Origin ASes announcing only one prefix: 14661 Transit ASes present in the Internet Routing Table: 4626 Transit-only ASes present in the Internet Routing Table: 101 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 24 Max AS path prepend of ASN (41664) 21 Prefixes from unregistered ASNs in the Routing Table: 2711 Unregistered ASNs in the Routing Table: 1247 Number of 32-bit ASNs allocated by the RIRs: 777 Prefixes from 32-bit ASNs in the Routing Table: 1013 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 195 Number of addresses announced to Internet: 2269815744 Equivalent to 135 /8s, 74 /16s and 163 /24s Percentage of available address space announced: 61.2 Percentage of allocated address space announced: 65.4 Percentage of available address space allocated: 93.7 Percentage of address space in use by end-sites: 84.8 Total number of prefixes smaller than registry allocations: 156540 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 80501 Total APNIC prefixes after maximum aggregation: 27663 APNIC Deaggregation factor: 2.91 Prefixes being announced from the APNIC address blocks: 77482 Unique aggregates announced from the APNIC address blocks: 34148 APNIC Region origin ASes present in the Internet Routing Table: 4193 APNIC Prefixes per ASN: 18.48 APNIC Region origin ASes announcing only one prefix: 1170 APNIC Region transit ASes present in the Internet Routing Table: 649 Average APNIC Region AS path length visible: 3.7 Max APNIC Region AS path length visible: 15 Number of APNIC addresses announced to Internet: 548634656 Equivalent to 32 /8s, 179 /16s and 128 /24s Percentage of available APNIC address space announced: 77.9 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 55296-56319, 131072-132095 APNIC Address Blocks 1/8, 14/8, 27/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 135830 Total ARIN prefixes after maximum aggregation: 70008 ARIN Deaggregation factor: 1.94 Prefixes being announced from the ARIN address blocks: 108483 Unique aggregates announced from the ARIN address blocks: 42882 ARIN Region origin ASes present in the Internet Routing Table: 13915 ARIN Prefixes per ASN: 7.80 ARIN Region origin ASes announcing only one prefix: 5331 ARIN Region transit ASes present in the Internet Routing Table: 1382 Average ARIN Region AS path length visible: 3.4 Max ARIN Region AS path length visible: 22 Number of ARIN addresses announced to Internet: 733654048 Equivalent to 43 /8s, 186 /16s and 172 /24s Percentage of available ARIN address space announced: 62.5 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 76004 Total RIPE prefixes after maximum aggregation: 44137 RIPE Deaggregation factor: 1.72 Prefixes being announced from the RIPE address blocks: 69440 Unique aggregates announced from the RIPE address blocks: 45491 RIPE Region origin ASes present in the Internet Routing Table: 14793 RIPE Prefixes per ASN: 4.69 RIPE Region origin ASes announcing only one prefix: 7615 RIPE Region transit ASes present in the Internet Routing Table: 2223 Average RIPE Region AS path length visible: 3.9 Max RIPE Region AS path length visible: 24 Number of RIPE addresses announced to Internet: 439134848 Equivalent to 26 /8s, 44 /16s and 170 /24s Percentage of available RIPE address space announced: 77.0 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 196608-197631 RIPE Address Blocks 2/8, 25/8, 31/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 176/8, 178/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 30120 Total LACNIC prefixes after maximum aggregation: 7214 LACNIC Deaggregation factor: 4.18 Prefixes being announced from the LACNIC address blocks: 28673 Unique aggregates announced from the LACNIC address blocks: 15258 LACNIC Region origin ASes present in the Internet Routing Table: 1350 LACNIC Prefixes per ASN: 21.24 LACNIC Region origin ASes announcing only one prefix: 421 LACNIC Region transit ASes present in the Internet Routing Table: 235 Average LACNIC Region AS path length visible: 4.0 Max LACNIC Region AS path length visible: 19 Number of LACNIC addresses announced to Internet: 75506304 Equivalent to 4 /8s, 128 /16s and 34 /24s Percentage of available LACNIC address space announced: 56.3 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 181/8, 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 7414 Total AfriNIC prefixes after maximum aggregation: 1892 AfriNIC Deaggregation factor: 3.92 Prefixes being announced from the AfriNIC address blocks: 5721 Unique aggregates announced from the AfriNIC address blocks: 1674 AfriNIC Region origin ASes present in the Internet Routing Table: 405 AfriNIC Prefixes per ASN: 14.13 AfriNIC Region origin ASes announcing only one prefix: 124 AfriNIC Region transit ASes present in the Internet Routing Table: 90 Average AfriNIC Region AS path length visible: 3.8 Max AfriNIC Region AS path length visible: 15 Number of AfriNIC addresses announced to Internet: 20253184 Equivalent to 1 /8s, 53 /16s and 10 /24s Percentage of available AfriNIC address space announced: 60.4 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 1860 9436 501 Korea Telecom (KIX) 7545 1369 298 84 TPG Internet Pty Ltd 4755 1346 370 160 TATA Communications formerly 17488 1346 153 123 Hathway IP Over Cable Interne 17974 1234 298 70 PT TELEKOMUNIKASI INDONESIA 24560 1029 304 177 Bharti Airtel Ltd., Telemedia 9583 1016 76 490 Sify Limited 4808 931 1713 260 CNCGROUP IP network: China169 18101 879 99 131 Reliance Infocom Ltd Internet 9829 821 691 36 BSNL National Internet Backbo Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3792 3667 278 bellsouth.net, inc. 4323 2702 1107 390 Time Warner Telecom 19262 1816 4668 286 Verizon Global Networks 1785 1793 698 131 PaeTec Communications, Inc. 20115 1494 1529 653 Charter Communications 7018 1459 5732 946 AT&T WorldNet Services 6478 1341 274 132 AT&T Worldnet Services 2386 1293 554 911 AT&T Data Communications Serv 11492 1194 228 89 Cable One 22773 1193 2858 61 Cox Communications, Inc. Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 3292 448 2026 389 TDC Tele Danmark 30890 439 99 209 Evolva Telecom 702 409 1869 323 UUNET - Commercial IP service 8866 403 117 19 Bulgarian Telecommunication C 8551 402 353 46 Bezeq International 3301 376 1672 331 TeliaNet Sweden 34984 374 90 185 BILISIM TELEKOM 3320 371 7328 323 Deutsche Telekom AG 12479 360 576 5 Uni2 Autonomous System 31148 338 18 79 FreeNet ISP Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1381 2655 343 UniNet S.A. de C.V. 10620 1319 247 148 TVCABLE BOGOTA 28573 1095 866 109 NET Servicos de Comunicao S.A 7303 794 408 101 Telecom Argentina Stet-France 6503 772 193 277 AVANTEL, S.A. 14420 578 37 74 CORPORACION NACIONAL DE TELEC 22047 559 310 15 VTR PUNTO NET S.A. 3816 480 209 94 Empresa Nacional de Telecomun 7738 477 922 30 Telecomunicacoes da Bahia S.A 11172 444 99 76 Servicios Alestra S.A de C.V Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1152 445 10 TEDATA 24863 728 147 39 LINKdotNET AS number 36992 661 279 176 Etisalat MISR 3741 266 906 224 The Internet Solution 6713 203 199 12 Itissalat Al-MAGHRIB 29571 200 19 11 Ci Telecom Autonomous system 2018 197 277 64 Tertiary Education Network 33776 196 12 14 Starcomms Nigeria Limited 24835 165 78 9 RAYA Telecom - Egypt 16637 155 440 93 MTN Network Solutions Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3792 3667 278 bellsouth.net, inc. 4323 2702 1107 390 Time Warner Telecom 4766 1860 9436 501 Korea Telecom (KIX) 19262 1816 4668 286 Verizon Global Networks 1785 1793 698 131 PaeTec Communications, Inc. 20115 1494 1529 653 Charter Communications 7018 1459 5732 946 AT&T WorldNet Services 8151 1381 2655 343 UniNet S.A. de C.V. 7545 1369 298 84 TPG Internet Pty Ltd 4755 1346 370 160 TATA Communications formerly Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 2702 2312 Time Warner Telecom 1785 1793 1662 PaeTec Communications, Inc. 19262 1816 1530 Verizon Global Networks 4766 1860 1359 Korea Telecom (KIX) 7545 1369 1285 TPG Internet Pty Ltd 17488 1346 1223 Hathway IP Over Cable Interne 6478 1341 1209 AT&T Worldnet Services 4755 1346 1186 TATA Communications formerly 10620 1319 1171 TVCABLE BOGOTA 17974 1234 1164 PT TELEKOMUNIKASI INDONESIA Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 11946 UNALLOCATED 8.12.155.0/24 40913 Quality Technology S 33084 UNALLOCATED 8.15.195.0/24 3356 Level 3 Communicatio 18826 UNALLOCATED 8.17.208.0/20 2828 XO Communications 16734 UNALLOCATED 8.18.204.0/24 26914 Global Netoptex, Inc 53562 UNALLOCATED 8.19.94.0/24 3356 Level 3 Communicatio 22015 UNALLOCATED 8.22.137.0/24 14989 Broadview Networks 46856 UNALLOCATED 8.22.184.0/22 3356 Level 3 Communicatio 21893 UNALLOCATED 8.26.33.0/24 3356 Level 3 Communicatio 26169 UNALLOCATED 8.225.177.0/24 20225 TelJet 32249 UNALLOCATED 8.225.178.0/24 3356 Level 3 Communicatio Complete listing at http://thyme.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 31.0.0.0/16 12654 RIPE NCC RIS Project 31.1.0.0/21 12654 RIPE NCC RIS Project 31.1.24.0/24 12654 RIPE NCC RIS Project 41.222.79.0/24 36938 >>UNKNOWN<< 41.223.196.0/24 36990 Alkan Telecom Ltd 41.223.197.0/24 36990 Alkan Telecom Ltd 41.223.198.0/24 36990 Alkan Telecom Ltd 41.223.199.0/24 36990 Alkan Telecom Ltd 46.45.128.0/21 42926 RIPE Network Coordination Cen 46.45.136.0/21 42926 RIPE Network Coordination Cen Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:10 /10:25 /11:67 /12:201 /13:419 /14:730 /15:1320 /16:11275 /17:5437 /18:9283 /19:18511 /20:23458 /21:23639 /22:30953 /23:30252 /24:172587 /25:1015 /26:1124 /27:583 /28:167 /29:47 /30:6 /31:0 /32:7 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6389 2418 3792 bellsouth.net, inc. 4766 1477 1860 Korea Telecom (KIX) 4323 1367 2702 Time Warner Telecom 1785 1256 1793 PaeTec Communications, Inc. 10620 1207 1319 TVCABLE BOGOTA 11492 1096 1194 Cable One 17488 1087 1346 Hathway IP Over Cable Interne 18566 1068 1087 Covad Communications 8452 1044 1152 TEDATA 24560 930 1029 Bharti Airtel Ltd., Telemedia Complete listing at http://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:71 2:11 4:13 8:307 12:2012 13:8 14:4 15:20 16:3 17:9 20:8 24:1393 27:339 31:1 32:61 33:12 38:701 40:97 41:2526 44:3 46:72 47:13 49:1 52:12 55:6 56:2 57:29 58:827 59:497 60:474 61:1081 62:1020 63:1968 64:3722 65:2300 66:3998 67:1862 68:1136 69:2797 70:739 71:372 72:1948 73:2 74:2326 75:284 76:329 77:906 78:647 79:414 80:1011 81:781 82:496 83:445 84:680 85:1036 86:432 87:682 88:324 89:1562 90:96 91:3044 92:426 93:992 94:1419 95:705 96:380 97:219 98:623 99:34 101:1 108:64 109:667 110:502 111:580 112:298 113:291 114:453 115:587 116:1098 117:658 118:510 119:869 120:137 121:703 122:1541 123:918 124:1221 125:1242 128:226 129:157 130:170 131:541 132:258 133:20 134:201 135:46 136:223 137:138 138:273 139:109 140:479 141:197 142:345 143:353 144:475 145:54 146:428 147:169 148:630 149:294 150:152 151:233 152:288 153:170 154:3 155:365 156:169 157:335 158:112 159:359 160:313 161:190 162:268 163:167 164:418 165:370 166:468 167:413 168:666 169:156 170:727 171:61 172:2 173:1078 174:500 175:169 176:1 177:1 178:483 180:648 181:1 182:211 183:254 184:156 186:644 187:479 188:809 189:811 190:4139 192:5775 193:4736 194:3435 195:2798 196:1188 198:3557 199:3579 200:5398 201:1578 202:8098 203:8290 204:3996 205:2383 206:2537 207:3065 208:3868 209:3469 210:2560 211:1307 212:1742 213:1684 214:673 215:66 216:4753 217:1573 218:473 219:398 220:1176 221:386 222:316 223:45 End of report

11 years, 9 months

Subject: AusCERT Week in Review - Week Ending 17/09/2010 (AUSCERT#20073F686)

by Richard Billington

AusCERT Week in Review 17 September 2010 Papers, Articles and other documents: - - ------------------------------------- Title: Stuxnet worm has been exploiting four 0-day vuls in Windows Date: 16 September 2010 URL: http://www.auscert.org.au/13361 Title: Siemens says Stuxnet worm hit industrial systems Date: 15 September 2010 URL: http://www.auscert.org.au/13334 Title: An analysis of the BlackEnergy botnet Date: 15 September 2010 URL: http://www.auscert.org.au/13349 Title: AusCERT is a finalist in the auDA Australia and New Zealand Internet Best Practice Award Date: 15 September 2010 URL: http://www.auscert.org.au/13352 Title: An analysis of Adobe Reader SING Table parsing vul - currently exploited in the wild Date: 14 September 2010 URL: http://www.auscert.org.au/13328 Title: Adobe Acrobat pushstring Memory Corruption vul Date: 13 September 2010 URL: http://www.auscert.org.au/13326 Title: Mitigation posted for Adobe Reader vulnerability ? use Microsoft EMET 2.0 Date: 11 September 2010 URL: http://www.auscert.org.au/13322 Web Log Entries: - - ---------------- Title: Microsoft September 2010 bulletins Date: 15 September 2010 URL: http://www.auscert.org.au/13344 Alerts, Advisories and Updates: - - ------------------------------- Title: ASB-2010.0207.2 - UPDATE [Win][Linux][Mac][OSX] Google Chrome: Multiple vulnerabilities Date: 17 September 2010 URL: http://www.auscert.org.au/13350 Title: ASB-2010.0212 - [Win][Linux][HP-UX][Solaris][AIX] IBM DB2 9.7: Execute arbitrary code/commands - Existing account Date: 17 September 2010 URL: http://www.auscert.org.au/13364 Title: ASB-2010.0213 - [Win][Linux][HP-UX][Solaris][AIX] IBM WebSphere Portal: Cross-site scripting - Remote/unauthenticated Date: 17 September 2010 URL: http://www.auscert.org.au/13365 Title: ASB-2010.0208 - [Win][Linux][HP-UX][Solaris][AIX] Lotus Quickr: Denial of service - Remote/unauthenticated Date: 16 September 2010 URL: http://www.auscert.org.au/13354 Title: ASB-2010.0209 - [Win][UNIX/Linux] Splunk prior to version 4.1.5.: Multiple vulnerabilities Date: 16 September 2010 URL: http://www.auscert.org.au/13355 Title: ASB-2010.0210.2 - UPDATE [Win][Linux][OSX] IBM Lotus Sametime Connect: Reduced security - Unknown/unspecified Date: 16 September 2010 URL: http://www.auscert.org.au/13358 Title: ASB-2010.0211 - [Win][UNIX/Linux] OpenX prior to 2.8.7: Reduced security - Unknown/unspecified Date: 16 September 2010 URL: http://www.auscert.org.au/13360 Title: ASB-2010.0205.2 - UPDATE [Win][AIX] IBM Records Manager: Multiple vulnerabilities Date: 14 September 2010 URL: http://www.auscert.org.au/13325 Title: ASB-2010.0206 - [Win] Microsoft Bulletin Notification - September Pre-release Announcement Date: 14 September 2010 URL: http://www.auscert.org.au/13333 External Security Bulletins: - - ---------------------------- Title: ESB-2010.0844 - [HP-UX] BIND: Provide misleading information - Remote/unauthenticated Date: 17 September 2010 OS: HP-UX URL: http://www.auscert.org.au/13363 Title: ESB-2010.0843 - [Debian] samba: Execute arbitrary code/commands - Remote/unauthenticated Date: 17 September 2010 OS: Debian GNU/Linux URL: http://www.auscert.org.au/13362 Title: ESB-2010.0842 - [Win][Linux] HP System Management Homepage: Multiple vulnerabilities Date: 16 September 2010 OS: Windows 2003, Red Hat Linux, Windows 7, Ubuntu, Debian GNU/Linux, Windows XP, SUSE, Windows 2000, Windows Vista, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13359 Title: ESB-2010.0841 - [Win][UNIX/Linux] Drupal Third-party modules: Multiple vulnerabilities Date: 16 September 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Windows 2003, Red Hat Linux, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, Windows XP, HP-UX, Other BSD Variants, SUSE, Windows 2000, OpenBSD, AIX, Windows Vista, FreeBSD, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13357 Title: ESB-2010.0840 - [Win][VMware ESX][RedHat][SUSE] Novell Platespin Orchestrate: Execute arbitrary code/commands - Remote/unauthenticated Date: 16 September 2010 OS: Windows 2003, Windows XP, Virtualisation, SUSE, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13356 Title: ESB-2010.0839 - [Win] QuickTime: Execute arbitrary code/commands - Remote with user interaction Date: 16 September 2010 OS: Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13353 Title: ESB-2010.0838 - [Appliance] 3Com OfficeConnect Gigabit VPN Firewall: Cross-site scripting - Remote with user interaction Date: 15 September 2010 URL: http://www.auscert.org.au/13351 Title: ESB-2010.0837.2 - UPDATE [Win][Linux][Solaris][AIX] Lotus Domino iCalendar: Execute arbitrary code/commands - Remote/unauthenticated Date: 17 September 2010 OS: Other Linux Variants, Windows Server 2008, Windows Vista, AIX, Windows 2000, SUSE, Windows XP, Ubuntu, Debian GNU/Linux, Windows 7, Red Hat Linux, Windows 2003, Solaris URL: http://www.auscert.org.au/13348 Title: ESB-2010.0836 - [Win][UNIX/Linux][Debian] cvsnt: Execute arbitrary code/commands - Remote/unauthenticated Date: 15 September 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Windows 7, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Windows XP, Other BSD Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/13347 Title: ESB-2010.0835 - [Win][UNIX/Linux][RedHat] samba and samba3x: Execute arbitrary code/commands - Remote/unauthenticated Date: 15 September 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, Other BSD Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/13346 Title: ESB-2010.0834 - [Win] Microsoft Outlook Web Access: Unauthorised access - Remote with user interaction Date: 15 September 2010 OS: Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13345 Title: ESB-2010.0833 - [Win] Microsoft Windows: Execute arbitrary code/commands - Existing account Date: 15 September 2010 OS: Windows 2003, Windows XP URL: http://www.auscert.org.au/13343 Title: ESB-2010.0832 - [Win] Microsoft Active Directory: Multiple vulnerabilities Date: 15 September 2010 OS: Windows 2003, Windows XP, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13342 Title: ESB-2010.0831 - [Win] Microsoft Windows: Execute arbitrary code/commands - Remote with user interaction Date: 15 September 2010 OS: Windows 2003, Windows XP URL: http://www.auscert.org.au/13341 Title: ESB-2010.0830 - [Win] Microsoft Windows: Execute arbitrary code/commands - Remote/unauthenticated Date: 15 September 2010 OS: Windows 2003, Windows XP URL: http://www.auscert.org.au/13340 Title: ESB-2010.0829 - ALERT [Win] Microsoft Internet Information Services: Multiple vulnerabilities Date: 15 September 2010 OS: Windows 2003, Windows XP, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13339 Title: ESB-2010.0828 - ALERT [Win] Microsoft Office: Execute arbitrary code/commands - Remote with user interaction Date: 15 September 2010 OS: Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13338 Title: ESB-2010.0827 - ALERT [Win] Microsoft Windows and Microsoft Office: Execute arbitrary code/commands - Remote with user interaction Date: 15 September 2010 OS: Windows 2003, Windows XP, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13337 Title: ESB-2010.0826 - ALERT [Win] Microsoft Windows: Execute arbitrary code/commands - Remote with user interaction Date: 15 September 2010 OS: Windows 2003, Windows XP, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13336 Title: ESB-2010.0825 - ALERT [Win] Microsoft Windows: Execute arbitrary code/commands - Remote with user interaction Date: 15 September 2010 OS: Windows 2003, Windows XP, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13335 Title: ESB-2010.0824 - [Linux] HP System Management Homepage: Root compromise - Existing account Date: 14 September 2010 OS: Red Hat Linux, SUSE, Other Linux Variants, Ubuntu, Debian GNU/Linux URL: http://www.auscert.org.au/13332 Title: ESB-2010.0823.2 - UPDATE [AIX] AIX: Multiple vulnerabilities Date: 17 September 2010 OS: AIX URL: http://www.auscert.org.au/13331 Title: ESB-2010.0822 - ALERT [Win][UNIX/Linux][Mobile] Adobe Flash Player, Adobe Reader and Adobe Acrobat: Execute arbitrary code/commands - Remote with user interaction Date: 14 September 2010 OS: IRIX, HP Tru64 UNIX, Solaris, Windows 2003, Red Hat Linux, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, Windows XP, HP-UX, Other BSD Variants, SUSE, Windows 2000, OpenBSD, AIX, Windows Vista, FreeBSD, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/13330 Title: ESB-2010.0821 - [Netware] Novell Netware: Execute arbitrary code/commands - Existing account Date: 14 September 2010 OS: Novell Netware URL: http://www.auscert.org.au/13329 Title: ESB-2010.0820 - [SUSE] kernel: Multiple vulnerabilities Date: 14 September 2010 OS: SUSE URL: http://www.auscert.org.au/13327 Title: ESB-2010.0819 - [Win] Blackberry Desktop Software: Execute arbitrary code/commands - Remote with user interaction Date: 13 September 2010 OS: Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/13324 Title: ESB-2010.0818 - [RedHat] tomcat5: Multiple vulnerabilities Date: 13 September 2010 OS: Red Hat Linux URL: http://www.auscert.org.au/13323 Title: ESB-2010.0777.2 - UPDATE [Debian] phpmyadmin: Multiple vulnerabilities Date: 13 September 2010 OS: Debian GNU/Linux URL: http://www.auscert.org.au/13266 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ===========================================================================

11 years, 9 months

upcoming PacNOG 8 - Preliminary Information

by pita＠connect.com.fj

Dear members, The PacNOG coordination team are working towards finalising details for the upcoming PacNOG 8th educational workshop and training, to be held in Kolonia, Pohnpei, Federated States of Microneia. Dates are: 22 Nov: Conference + Tutorials 23-27 Nov: Concurrent Tracks with Lectures, Labs & Practical: Track 1 - IPv4/IPv6 Network routing Track 2 - Network Systems-monitoring/management + Wireless networks A possible Track 3 is envisaged for a VoIP workshop subject to the numbers. we will further announce more information once confirmed meantime pre-registering online at this link will be welcomed to gives an earlier indicators for the details: http://www.pita.org.fj/index.cfm?action=events&cmd=view&id=E1F732AB-1A64-25… For any further information, feel free to contact me: with regards Fred C Manager PITA for the PacNOG Coordinating Committee --------------------------------------------- This message was sent from Connect. http://www.connect.com.fj

11 years, 9 months

APRICOT 2011 PC call for volunteers

by Jonny Martin

APRICOT Programme Committee --------------------------- The APRICOT Programme Committee is responsible for the solicitation and selection of suitable presentation and tutorial content for the annual APRICOT conference (www.apricot.net). The APIA Board is responsible for the selection of a new APRICOT PC each year. To that end, the Board is now seeking nominations. Eligible candidates are those who have attended APRICOT in the recent past, have broad technical knowledge of Internet operations, and have some reasonable familiarity with the format of APRICOT meetings. Having constructive opinions and ideas about how the programme for APRICOT might be improved is of high value too. PC members are expected to either work actively to solicit content for APRICOT, or review submissions, or preferably both. The PC meets by conference call, weekly in frequency during December and January, in the run up to APRICOT. If you are interested in nominating yourself or someone else, please send a brief note to pc-chairs(a)apricot.net. The note should include the nominee's contact details (including e-mail address), and a brief description of why (in your opinion) the nominee would be a good addition to the PC. The APIA Board will accept nominations received by Monday 27 September 2010, and will announce the new PC shortly thereafter. Many thanks! Jonny Martin & Mark Tinka (for the APIA Board)

11 years, 9 months

IANA DNSSEC Testbed has been Decommissioned

by Joe Abley

Colleagues, Following advanced notice sent to this list on 2010-08-03, the IANA testbed was shut down on 2010-09-03. For more details on the IANA DNSSEC testbed, see <https://ns.iana.org/>. For more details on DNSSEC deployment in the Root Zone, see <http://www.root-dnssec.org/>. Queries to the nameserver bound to NS.IANA.ORG (208.77.188.32, 2620:0:2d0:1::32) now fail with ICMP type 3 code 3 (Destination Unreachable, Port Unreachable). We suggest that anybody using the DNSSEC testbed for anything resembling production services make plans to stop doing so at their earliest convenience, if operational necessity has not already made that obvious. ICANN would once again like to thank Packet Clearing House (PCH) and Dyn.com DynTLD for their support and generous donation of global DNS resources to the IANA DNSSEC testbed. Regards, Joe Abley Director DNS Operations, ICANN

11 years, 9 months

FYI - Australian IPv6 Summit 2010 - Melbourne 18-20 October 2010

by Skeeve Stevens

Hey Pacific People, With IPv6 now upon us, please consider coming along to the Australian IPv6 Summit in Melbourne this October. The quality of speakers from the Service provider industry is excellent and the programme looks great. It is very important that if you haven't already started rolling out IPv6 and spent a reasonable time planning for it, that you get yourself a long to this conference and make sure you future proof your organisation. With under a year of IPv6 available to service providers, it is more important now than ever that you make sure you know what is happening out there in vendor world and what others are doing. If you do want to go, you will save yourself over $100 if you register this coming week... see below for details. ...Skeeve [cid:image002.jpg@01CB52D2.BC399050]<http://www.ipv6.org.au/summit/> Join us at the sixth Australian IPv6 Summit, 18 - 20 October 2010, Rendezvous Hotel Melbourne. As the sixth Australian IPv6 Summit, it's got to be a special one! We're no longer counting stars and discussing the theory of IPv6: it's all around us now. IPv6 has arrived, and we're seeing the quiet beginnings of an innovative Internet revolution. See www.ipv6.org.au/summit/<http://www.ipv6.org.au/summit/> Certainly, IPv6 can offer us cost savings, enhanced productivity, simpler networks and smart infrastructure: but now we're finding out that IPv6 provides much more. The ease of management and extraordinary abundance of addresses, previously such a tightly-held resource, has opened up green-field possibilities like never before. Speakers currently include: Alaa Al-Din Al-Radhi, IPv6 Forum Jordan Chapter Alan Lloyd, wwite Beatty Lane-Davis, Juniper Networks Darren Beauchamp, AGIMO Dr Jared Ring, QUT Dr Vint Cerf, Google (by DVD) Geoff Huston, APNIC Jen Linkova, Google John Gibbins, CSIRO John Hillier, AGIMO John Mann, Monash University Kevin Karp, IPv6 Now Kurt Bales, eintellego Latif Ladid, IPv6 Forum Lawrence Hughes, InfoWeapons Luigi Sorbello, Telstra Mark Prior, Juniper Networks Matt Carling, Cisco Mike Biber, IPv6 Forum Australia Paul Ducklin, Sophos Paul Pettigrew, Mach Technology Phil Roberts, Internet Society Prof Hiroshi Esaki, University of Tokyo (by Skype) Prof Shian-Shyong Tseng, TWNIC Qing Li, Blue Coat Systems Richard Wood, InternetNZ Ron Broersma, DREN Scott Hogg, Global Technology Services (by Skype) Seunghae Kim, KREONET Shannon McFarland, Cisco Shaun Ewing, AussieHQ Silvia Hagen, Sunny Connection AG Simon Hackett, Internode Tony Hill, AP IPv6 Task Force IPv6 provides simpler network management, enhanced mobility and almost unlimited Internet addresses for next-generation devices. The IPv6 Summit offers two days of international and Australian experts, plus an optional one-day IPv6 Workshop to provide a hands-on guide to implementation. Location: The Summit will be held at the Rendezvous Hotel, 328 Flinders Street, Melbourne. Accommodation should be booked via the Summit website or through the conference organisers. Special rates have been negotiated from $180 per night single/double/twin share. For more details about the venue, visit www.ipv6.org.au/summit/location.php<http://www.ipv6.org.au/summit/location.php> [cid:image004.jpg@01CB52D2.BC399050] [cid:image006.jpg@01CB52D2.BC399050] Sponsors currently include: * Platinum - Internode<http://www.internode.on.net/> * Gold - Juniper Networks<http://www.juniper.net/us/en/> and Multimedia Victoria<http://www.mmv.vic.gov.au/> * Silver - Cisco<http://www.cisco.com/web/ANZ/index.html> and HP <http://welcome.hp.com/country/au/en/cs/home.html> * Bronze - BlueCat Networks<http://www.bluecatnetworks.com/>, Blue Coat Systems<http://www.bluecoat.com/>, eintellego<http://www.eintellego.net/site/>, IPv6Now<http://www.ipv6now.com.au/>, Mach Technology<https://mach.com.au/web>, Sophos<http://www.sophos.com/> and Vocus Communications<http://www.vocus.com.au/> Registration - Early bird registrations close Friday 17 September 2010: Full Registration includes attendance at all sessions, welcome reception, conference dinner, lunches, morning/afternoon teas, collateral and electronic access to all papers. The cost of registration is as follows, all figures include GST: Registration Type Price (inc GST) Early Bird Registrations BEFORE 17 September 2010 Early Bird Full Delegate Registration $770 Early Bird Government or Associate* Registration $590 Full Registrations AFTER 17 September 2010 Full Delegate Registration $880 Full Government or Associate* Registration $700 Full-time Student Registration $275 *'Associate' means member or staff of a host, sponsor or supporter association. To register and book your accommodation for the Australian IPv6 Summit complete the secure online registration form accessible through www.ipv6.org.au/summit/registration.php<http://www.ipv6.org.au/summit/registration.php>, or print out the registration form and fax or post to the conference organisers: Conference Organiser ConferenceIT Suite 1, 39 Tinarra Crescent, Kenmore Hills QLD 4069, Australia Email: ipv6(a)conferenceit.com.au<mailto:ipv6@conferenceit.com.au> Phone : 07 3878 2974 Fax: 07 3378 9513 Hosted by [cid:image008.jpg@01CB52D2.BC399050]<http://www.aigroup.com.au/> [cid:image010.jpg@01CB52D2.BC399050]<http://www.isoc-au.org.au/> Proudly sponsored by PLATINUM [cid:image012.jpg@01CB52D2.BC399050]<http://www.internode.on.net/> GOLD [cid:image014.jpg@01CB52D2.BC399050]<http://www.juniper.net/us/en/> [cid:image016.jpg@01CB52D2.BC399050]<http://www.mmv.vic.gov.au/> SILVER [cid:image018.jpg@01CB52D2.BC399050] [cid:image020.jpg@01CB52D2.BC399050]<http://welcome.hp.com/country/au/en/cs/home.html> BRONZE [cid:image022.jpg@01CB52D2.BC399050]<http://www.bluecatnetworks.com/> [cid:image024.jpg@01CB52D2.BC399050]<http://www.bluecoat.com/> [cid:image026.jpg@01CB52D2.BC399050]<http://www.eintellego.net/site/> [cid:image028.jpg@01CB52D2.BC399050]<http://www.ipv6now.com.au/> [cid:image030.jpg@01CB52D2.BC399050]<https://mach.com.au/web> [cid:image032.jpg@01CB52D2.BC399050]<http://www.sophos.com/> [cid:image034.jpg@01CB52D2.BC399050]<http://www.vocus.com.au/> Supported by [cid:image036.jpg@01CB52D2.BC399050]<http://www.auda.org.au/> [cid:image038.jpg@01CB52D2.BC399050]<http://www.ipv6forum.org.au/> [cid:image040.jpg@01CB52D2.BC399050]<http://www.ipv6forum.com/> [cid:image042.jpg@01CB52D2.BC399050]<http://nictia.org.au/joomla/> [cid:image044.jpg@01CB52D2.BC399050]<http://www.isoc.org/> [cid:image046.jpg@01CB52D2.BC399050]<http://www.commsalliance.com.au/> [cid:image048.jpg@01CB52D2.BC399050]<http://www.acs.org.au/> [cid:image050.jpg@01CB52D2.BC399050]<http://www.aiia.com.au/> [cid:image052.jpg@01CB52D2.BC399050]<http://www.icann.org/> [cid:image054.jpg@01CB52D2.BC399050]<http://www.engineersaustralia.org.au/> -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve www.linkedin.com/in/skeeve ; facebook.com/eintellego -- NOC, NOC, who's there? Disclaimer: Limits of Liability and Disclaimer: This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. eintellego Pty Ltd and each legal entity in the Tefilah Pty Ltd group of companies reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. Any reference to costs, fee quotations, contractual transactions and variations to contract terms is subject to separate confirmation in writing signed by an authorised representative of eintellego. Whilst all efforts are made to safeguard inbound and outbound e-mails, we cannot guarantee that attachments are virus-free or compatible with your systems and do not accept any liability in respect of viruses or computer problems experienced.

11 years, 9 months

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

pacnog September 2010