CERT Le CERT est un centre d'expertise consacré à la sécurité d'Internet, situé à l'institut de technologie de la programmation . La recherche se fait dans un cadre fédéral et est placée sous l'autorité de l'université de Carnegie Mellon . L'équipe étudie les vulnérabilités de sécurité d'Internet, examine les incidents de degré de sécurité d'ordinateur, édite des alertes de sécurité, recherche les changements à long terme des systèmes gérés en réseau, et développe information et formation pour aider la communauté informatique à améliorer la sécurité.

Avis du Cert CC :
+ http://www.cert.org/advisories/CA-2001-19.html : Advisory CA-2001-19 "Code Red" Worm Exploiting Buffer Overflow In IIS Indexing Service DLL
+ http://www.cert.org/advisories/CA-2001-23.html : Advisory CA-2001-23 Continued Threat of the "Code Red" Worm

Dernières communications :

CA-2001-37: Buffer Overflow in UPnP Service on Microsoft Windows December 20, 2001

Vulnerabilities in software included by default on Microsoft Windows XP, and optionally on Windows ME and Windows 98, may allow an intruder to execute arbitrary code on vulnerable systems, to launch denial-of-service attacks against vulnerable systems, or to use vulnerable systems to launch denial-of-service attacks against third-party systems.

CA-2001-36: Microsoft Internet Explorer Does Not Respect Content-Disposition and Content-Type MIME Headers December 19, 2001

Microsoft Internet Explorer contains a vulnerability in its handling of certain MIME headers in web pages and HTML email messages. This vulnerability may allow an attacker to execute arbitrary code on the victim's system when the victim visits a web page or views an HTML email message.

CA-2001-35: Recent Activity Against Secure Shell Daemons  December 13, 2001

There are multiple vulnerabilities in several implementations of the Secure Shell (SSH) protocol. The SSH protocol enables a secure communications channel from a client to a server. We are seeing a high amount of scanning for SSH daemons, and we are receiving reports of exploitation.

CA-2001-34: Buffer Overflow in System V Derived Login December 12, 2001

Several applications use login for authentication to the system. A remotely exploitable buffer overflow exists in login derived from System V. Attackers can exploit this vulnerability to gain root access to the server.

CA-2001-33: Multiple Vulnerabilities in WU-FTPD November 29, 2001

WU-FTPD is a widely deployed software package used to provide File Transport Protocol (FTP) services on UNIX and Linux systems. There are two vulnerabilities in WU-FTPD that expose a system to potential remote root compromise by anyone with access to the FTP service.

CA-2001-32: HP-UX Line Printer Daemon Vulnerable to Directory Traversal  November 21, 2001

The HP-UX line printer daemon (rlpdaemon) enables various clients to share printers over a network. A remotely exploitable buffer overflow vulnerability exists in the rlpdaemon.

CA-2001-31: Buffer Overflow in CDE Subprocess Control Service November 12, 2001

There is a remotely exploitable buffer overflow vulnerability in a library function used by the CDE Subprocess Control Service. This vulnerability could be used to crash the service or to execute arbitrary code with root privileges.

CA-2001-30: Multiple Vulnerabilities in lpd November 5, 2001

There are multiple vulnerabilities in several implementations of the line printer daemon (lpd). The line printer daemon enables various clients to share printers over a network.

Base de données du CERT