CRIME FW: [Cyber_threats] Daily News 11/08/02

GeorgeH@private

-----Original Message-----
From: NIPC Watch [mailto:nipcwatch@private] 
Sent: Friday, November 08, 2002 7:31 AM
To: Cyber Threats
Subject: [Cyber_threats] Daily News 11/08/02

November 6, CNET News - Russian firm warns of Roron virus. A Russian
antivirus company on Wednesday warned that a new virus could help hackers
gain control of home computers, but other security companies downplayed the
threat. Kaspersky Labs has named the virus, or worm, Roron, and it is known
as Oror.B by several other companies. The new computer virus can spread
through e-mail messages, shared hard drives and the Kazaa file-sharing
network, Kaspersky Labs spokesman Denis Zemkin said. "We see that this worm
is particularly dangerous for home users," Zemkin said. "Corporate customers
are already aware of the danger of attachments," and are unlikely to open
the file containing the program. Source.
http://news.com.com/2100-1001-964809.html?tag=lh

November 5, Internet News - Oracle9i Database Buffer Overflow Vulnerability
in iSQL*Plus. A potential buffer overflow security vulnerability has been
discovered in the iSQL*Plus component of Oracle9i Database. All versions of
Oracle9i, including the recently released Oracle9i Database Release 2, are
susceptible to the vulnerability. A malicious user could take advantage of
the vulnerability to pass a USERID parameter that may result in a remote
buffer overflow exploit against iSQL*Plus. SQL*Plus is not affected by the
exploit. Future releases of Oracle Database will contain the fix by default,
and patches are available from the Oracle Worldwide Support Services web
site for current releases. Source:
http://www.internetnews.com/dev-news/article.php/1494901

Virus: #1 Virus in USA: PE_FUNLOVE.4099 (aka W32/FunLove.4099, W32/FLCSS,
W32.FunLove.4099)
Source: http://wtc.trendmicro.com/wtc/wmap.html, Trend World Micro Virus
Tracking Center [Infected Computers, North America, Past 24 hours, #1 in
United States]

Top 10 Target Ports
137(netbios-ns); 80(http); 1433(ms-sql-s); 21(ftp); 139 (netbios-ssn);
25(smtp); 445(microsoft-ds); 53(domain); 111(sunrpc); 27374(asp)
Source: http://isc.incidents.org/top10.html; Internet Storm Center

_______________________________________________
Cyber_Threats mailing list
Cyber_Threats@listserv
http://listserv.infragard.org/mailman/listinfo/cyber_threats