CRIME FW: NIPC Daily Report 11 January 2002

From: George Heuston (GeorgeH@private)
Date: Fri Jan 11 2002 - 08:17:32 PST

  • Next message: Alan: "Re: CRIME FW: NIPC Daily Report 11 January 2002"

    -----Original Message-----
    From: NIPC Watch [mailto:nipc.watch@private] 
    Sent: Friday, January 11, 2002 7:18 AM
    To: Daily Distribution
    Subject: NIPC Daily Report 11 January 2002
    
    
    The NIPC Daily Report                                 11 January 2002
    
    The NIPC Watch and Warning Unit compiles this report to inform 
    recipients of issues impacting the integrity and capability of the 
    nation's critical infrastructures.
    
    New security vulnerability affects Linux.  The "A Linux Intrusion 
    Detection System" security patch for the Linux kernel reportedly creates 
    a security vulnerability.  Exploitation is easy and local users may be 
    able to gain unrestricted root privileges.  (SecuriTeam.com, 10 JAN 02)
    
    Cisco reports multiple vulnerabilities in SN 5420 storage routers. 
    Cisco discovered three vulnerabilities in its SN 5420 storage router 
    software for releases up to and including 1.1(5).  Two of the 
    vulnerabilities can cause a denial-of-service attack.  The other allows 
    access to the SN 5420 configuration if it has been previously saved on 
    the router. Cisco's advisory that addresses these vulnerabilities can be 
    found at the following url: 
    http://www.cisco.com/warp/public/707/SN-multiple-pub.shtml (Security 
    Focus, 09 JAN 02)
    
    New mass mailer may threaten Microsoft Outlook and mIRC users.   A new 
    mass mailing virus/worm JS/Gigger.A@mm has appeared in the wild that has 
    the potential to do large-scale damage to systems running Microsoft 
    Outlook and mIRC (a popular Internet Relay Chat client).  The virus/worm 
    sends itself to all Outlook addresses on the infected system, infects 
    the IRC channel through the mIRC client, and re-formats the entire c: 
    drive. (Symantec, 09 JAN 02)
    
    Hacking activity plummets.  Security breaches and hacking attacks have 
    diminished in numbers since the 11 September terrorist attacks, 
    according to data from the Federal Computer Incident Response Center 
    (FedCIRC).  Analysis of FedCIRC monthly reports shows just 15 incidents 
    of intruder activity reported in December 2001, which is less than a 
    third of that recorded in December 2000.  (The Register, 10 JAN 02)
    



    This archive was generated by hypermail 2b30 : Sun May 26 2002 - 11:38:19 PDT