Further Information

ESB-2004.0482 -- US-CERT Technical Cyber Security Alert TA04-217A -- Multiple Vulnerabilities in libpng - (05/08/2004)

ESB-2004.0485 -- Sun Alert Notification - Sun Alert ID: 57613 -- Java Runtime Environment May Allow Untrusted Applets to Escalate Privileges - (05/08/2004)

ESB-2004.0478 -- US-CERT Technical Cyber Security Alert TA04-212A -- Critical Vulnerabilities in Microsoft Windows - (02/08/2004)

AL-2004.22 -- Summary for July 2004 -- Microsoft Security Bulletin - This out-of-band Microsoft update contains three critical updates. There are also four important and one moderate updates. (31/07/2004)

AL-2004.19 -- Product Support Services - Critical Product Vulnerability - July 2004 - Microsoft have released two critical, four important updates and one moderate update. (14/07/2004)

ESB-2004.0453 -- iDEFENSE Security Advisory 07.12.04 -- Adobe Reader 6.0 Filename Handler Buffer Overflow Vulnerability - (13/07/2004)

ESB-2004.0451 -- CIAC BULLETIN O-174 -- Ethereal Multiple Problems in 0.10.4 - (12/07/2004)

AL-2004.18 -- Issues concerning Internet Explorer and the ADODB.STREAM patch - The recently released Microsoft patch for Internet Explorer that disables the ADODB.STREAM ActiveX control does NOT fix cross-domain IE vulnerabilities but rather mitigates against exploitation via ADODB.STREAM. (12/07/2004)

ESB-2004.0446 -- NGSSoftware Insight Security Research Advisory -- MySQL Authentication Bypass - This advisory details a bug that allows a remote user to entirely bypass the MySQL password authentication mechanism. (06/07/2004)

ESB-2004.0442 -- iDEFENSE Security Advisory 07.01.04 -- WinGate Information Disclosure Vulnerability - (05/07/2004)

ESB-2004.0441 -- iDEFENSE Security Advisory 06.23.04 -- Lotus Notes URI Handler Argument Injection Vulnerability - (05/07/2004)

ESB-2004.0418 -- iDEFENSE Security Advisory 06.07.04 -- PHP Win32 escapeshellcmd() and escapeshellarg() Input Validation Vulnerability - (17/06/2004)

ESB-2004.0417 -- eEye Security Bulletin -- "IBM Access Support" (eGatherer) Activex Dangerous Methods Vulnerability - (17/06/2004)

ESB-2004.0404 -- NGSSoftware Insight Security Research Advisory NISR11062004 -- REAL One Player code execution through malformed media file - (15/06/2004)

ESB-2004.0407 -- US-CERT Technical Cyber Security Alert TA04-163A -- Cross-Domain Redirect Vulnerability in Internet Explorer - A cross-domain vulnerability in Internet Explorer (IE) could allow an attacker to execute arbitrary code with the privileges of the user running IE. (15/06/2004)

ESB-2004.0402 -- UNIRAS ALERT - 25/04 -- Malicious Software Report - W32/Zafi.b - Reports are coming in of a new virus known as W32/Zafi.B. The indications are that the rate of infections being reported to antivirus suppliers is increasing. Some vendors have raised their threat assessment to MEDIUM. (15/06/2004)

AL-2004.12 -- NISCC Vulnerability Advisory 236929 - Vulnerability Issues in TCP - There is a vulnerability in TCP which allows remote attackers to terminate network sessions. The Border Gateway Protocol (BGP) is judged to be potentially most affected by this vulnerability. (21/04/2004)

ESB-2004.0270 -- Microsoft Security Bulletin Re-releases -- MS00-082 MS01-041 MS02-011 MS03-046 - (14/04/2004)

ESB-2004.0269 -- Microsoft Security Bulletin MS04-014 -- Vulnerability in the Microsoft Jet Database Engine Could Allow Code Execution (837001) - (14/04/2004)

ESB-2004.0267 -- Microsoft Security Bulletin MS04-012 -- Cumulative Update for Microsoft RPC/DCOM (828741) - (14/04/2004)

ESB-2004.0266 -- Microsoft Security Bulletin MS04-011 -- Security Update for Microsoft Windows (835732) - (14/04/2004)

AA-2004.01 -- Recent Important Microsoft Vulnerabilities and Patches for Windows (LSASS) and Outlook Express - Microsoft has recently released security bulletins warning of several vulnerabilities most notable of these being those affecting the Local Security Authority Subsystem Service (LSASS) in Windows 2000 and Windows XP, and MHTML URL processing in Outlook Express. (14/04/2004)

ESB-2004.0268 -- Microsoft Security Bulletin MS04-013 -- Cumulative Security Update for Outlook Express (837009) - This is a cumulative update that includes the functionality of all the previously-released updates for Outlook Express 5.5 and Outlook Express 6. Microsoft recommends that this update be installed immediately on all systems. Any systems where e-mail is read or where Internet Explorer is used frequently are at the most risk from this vulnerability. (14/04/2004)

AL-2004.10 -- AUSCERT ALERT -- Bogus Banking Email Allows Trojan Infection for Outlook Users - A vulnerability in Microsoft Internet Explorer and Outlook Express is being used to trick online banking customers into visiting a malicious web site. The vulnerability[2] allows a URL to be spoofed by manipulating the information displayed in the status bar using an embedded form. (04/04/2004)

AL-2004.09 -- W32/Netsky.P@mm spreading with new attack methods - A new variant of the mass-mailing worm "Netsky" is spreading. The indications are that the rate of infections of W32/Netsky.P@mm being reported to antivirus suppliers is increasing. (23/03/2004)

ESB-2004.0179 -- NGSSoftware Insight Security Research Advisory NISR03022004 -- Adobe Acrobat Reader XML Forms Data Format Buffer Overflow - (04/03/2004)

ESB-2004.0162 -- Trend Micro Medium Risk Virus Alert -- WORM_NETSKY.C (W32/Netsky.C@MM, W32.Netsky.C@mm, Win32.Netsky.C, NetSky.C, I-Worm.Moodown.c) - (26/02/2004)

ESB-2003.0822 -- UNIRAS Brief - 645/03 -- Microsoft security issue affecting Exchange Server 2003 and Outlook Web Access (OWA) - (28/11/2003)

ESB-2003.0819 -- ISC Announcement - BIND 8.4.3 maintenance release -- Security Fix: Negative Cache Poison Fix - BIND DNS server version 8.4.3 is available, fixing a Negative Cache Poison vulnerability which may allow a remote attacker to cause a denial of service for specific domains. (28/11/2003)

ESB-2003.0814 -- CERT Summary -- CERT Summary CS-2003-04 - (25/11/2003)

ESB-2003.0774 -- RHSA-2003:323-01 -- Updated Ethereal packages fix security issues - (11/11/2003)

ESB-2003.0753 -- UNIRAS Brief - 600/03 -- Malicious Software Report - W32/Mimail.c@MM - Anti-virus vendors have been reporting an increase in the propagation of the W32/Mimail.c mass-mailing worm. (02/11/2003)

ESB-2003.0698 -- CERT Advisory CA-2003-26 -- Multiple Vulnerabilities in SSL/TLS Implementations - (03/10/2003)

ESB-2003.0687 -- CERT Advisory Notice -- Clarifications regarding recent vulnerabilities in OpenSSH - Clarifications regarding several recent vulnerabilities affecting OpenSSH (30/09/2003)

AL-2003.16 -- Buffer Management Vulnerability in OpenSSH - Sites running OpenSSH prior to 3.7, and any implementations of code derived from OpenSSH prior to 3.7, to evaluate their exposure to this vulnerabilities and to apply the vendor patches, and/or network filters as deemed necessary. (17/09/2003)


Previous  1, 2, 3  Next denotes AusCERT member only content.