CRIME FW: [Cyber_threats] Daily News 12/10/02

From: George Heuston (GeorgeH@private)
Date: Tue Dec 10 2002 - 08:05:19 PST

  • Next message: Lyle Leavitt: "CRIME [Fwd: [Information_technology] Daily News 12/10/02]"

    -----Original Message-----
    From: NIPC Watch [mailto:nipcwatch@private] 
    Sent: Tuesday, December 10, 2002 6:45 AM
    To: Cyber Threats
    Subject: [Cyber_threats] Daily News 12/10/02
    
    December 9, CERT/CC
    Vulnerability Note VU#961489 -- University of Washington IMAP Server
    vulnerable to buffer overflow after login. A buffer overflow vulnerability
    exists in versions of the University of Washington IMAP Server up to and
    including the imap-2002 release. This vulnerability may allow an
    authenticated attacker to execute arbitrary code on the mail server with the
    privileges of the UID of the user running imapd. The University of
    Washington IMAP (UW IMAP) server is an e-mail application that uses the
    Internet Message Access Protocol (lMAP). This vulnerability is fixed in the
    latest development snapshot of the imap-2002a release. Source.
    http://www.kb.cert.org/vuls/id/961489
    
    Virus: #1 Virus in USA: PE FUNLOVE.4099
    Source: http://wtc.trendmicro.com/wtc/wmap.html, Trend World Micro Virus
    Tracking Center [Infected Computers, North America, Past 24 hours, #1 in
    United States]
    
    Top 10 Target Ports
    137(netbios-ns); 80(http); 1433(ms-sql-s); 21(ftp); 25(smtp); 4662;
    139(netbios-ssn); 445(microsoft-ds); 53(domain); 27374 (asp)
    Source: http://isc.incidents.org/top10.html; Internet Storm Center
    
    
    _______________________________________________
    Cyber_Threats mailing list
    Cyber_Threats@listserv
    http://listserv.infragard.org/mailman/listinfo/cyber_threats
    



    This archive was generated by hypermail 2b30 : Tue Dec 10 2002 - 09:05:38 PST