CRIME FW: [Cyber_threats] Daily News 12/10/02

Previous message: George Heuston: "CRIME Meeting Tomorrow @10AM@Verizon"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

GeorgeH@private

-----Original Message-----
From: NIPC Watch [mailto:nipcwatch@private] 
Sent: Tuesday, December 10, 2002 6:45 AM
To: Cyber Threats
Subject: [Cyber_threats] Daily News 12/10/02

December 9, CERT/CC
Vulnerability Note VU#961489 -- University of Washington IMAP Server
vulnerable to buffer overflow after login. A buffer overflow vulnerability
exists in versions of the University of Washington IMAP Server up to and
including the imap-2002 release. This vulnerability may allow an
authenticated attacker to execute arbitrary code on the mail server with the
privileges of the UID of the user running imapd. The University of
Washington IMAP (UW IMAP) server is an e-mail application that uses the
Internet Message Access Protocol (lMAP). This vulnerability is fixed in the
latest development snapshot of the imap-2002a release. Source.
http://www.kb.cert.org/vuls/id/961489

Virus: #1 Virus in USA: PE FUNLOVE.4099
Source: http://wtc.trendmicro.com/wtc/wmap.html, Trend World Micro Virus
Tracking Center [Infected Computers, North America, Past 24 hours, #1 in
United States]

Top 10 Target Ports
137(netbios-ns); 80(http); 1433(ms-sql-s); 21(ftp); 25(smtp); 4662;
139(netbios-ssn); 445(microsoft-ds); 53(domain); 27374 (asp)
Source: http://isc.incidents.org/top10.html; Internet Storm Center

_______________________________________________
Cyber_Threats mailing list
Cyber_Threats@listserv
http://listserv.infragard.org/mailman/listinfo/cyber_threats