Open Source .NET Development [Electronic resources]

Brian Nantz

نسخه متنی -صفحه : 275/ 249
نمايش فراداده

Appendix E. Open Source Security Observations

2001

Proprietary

Open Source

CERT Advisory CA-2001-01 Multiple Vulnerabilities in BIND

1

1

CERT Incident Note IN-2001-01, Widespread Compromises via "ramen" Toolkit

1

CERT Advisory CA-2000-22 Input Validation Problems in LPRng

1

1

CERT Advisory CA-2001-03 VBS/OnTheFly (Anna Kournikova) Malicious Code

1

CERT Advisory CA-2001-11: sadmind/IIS Worm

1

CERT Advisory CA-2001-12: Superfluous Decoding Vulnerability in IIS

1

CERT Advisory CA-2001-10: Buffer Overflow Vulnerability in Microsoft IIS 5.0

1

CERT Advisory CA-2001-05: Exploitation of snmpXdmid

1

1

CERT Incident Note IN-2001-03: Exploitation of BIND Vulnerabilities

1

1

CERT Advisory CA-2001-02: Multiple Vulnerabilities in BIND

1

1

CERT Incident Note IN-2001-05: The "cheese" Worm

1

1

CERT Advisory CA-2001-09: Statistical Weaknesses in TCP/IP Initial Sequence Numbers

1

1

CERT Advisory CA-2001-13: Buffer Overflow In IIS Indexing Service DLL

1

CERT Advisory CA-2001-19: "Code Red" Worm Exploiting Buffer Overflow in IIS Indexing Service DLL

1

CERT Advisory CA-2001-23: Continuing Threat of the "Code Red" Worm

1

CERT Advisory CA-2001-22: W32/Sircam Malicious Code

1

CERT Advisory CA-2001-21: Buffer Overflow in telnetd

1

1

CERT Advisory CA-2001-15: Buffer Overflow in Sun Solaris in.lpd Print Daemon

1

CERT Advisory CA-2001-20: Continuing Threats to Home Users

1

1

CERT Incident Note IN-2001-07: W32/Leaves: Exploitation of previously installed SubSeven Trojan Horses

1

CERT Advisory CA-2001-26: Nimda Worm

1

Vulnerability Note #945216: SSH CRC32 attack detection code contains remote integer overflow

1

1

Incident Note IN-2001-11: Cache Corruption on Microsoft DNS Servers

1

Vulnerability Note #109475: Microsoft Windows NT and 2000 Domain Name Servers allow non-authoritative RRs to be cached by default

1

2002

Proprietary

Open Source

CERT Advisory CA-2002-03: Multiple Vulnerabilities In Many Implementations of the Simple Network Management Protocol (SNMP)

1

1

CERT Advisory CA-2002-01: Exploitation of Vulnerability in CDE Subprocess Control Service

1

CERT Advisory CA-2001-31: Buffer Overflow in CDE Subprocess Control Service

1

CERT Advisory CA-2001-37: Buffer Overflow in UPnP Service On Microsoft Windows

1

CERT Advisory CA-2001-35: Recent Activity Against Secure Shell Daemons

1

1

CERT Advisory CA-2001-33: Multiple Vulnerabilities in WU-FTPD

1

1

CERT Incident Note IN-2001-14: W32/BadTrans Worm

1

CERT Incident Note IN-2001-13: "Kaiten" Malicious Code Installed by Exploiting Null Default Passwords in MS-SQL

1

CERT Incident Note IN-2002-04: Exploitation of Vulnerabilities in Microsoft SQL Server

1

CERT Advisory CA-2002-13: Buffer Overflow in Microsoft's MSN Chat ActiveX Control

1

CERT Advisory CA-2002-12: Format String Vulnerability in ISC DHCPD

1

CERT Advisory CA-2002-11: Heap Overflow in Cachefs Daemon (cachefsd)

1

CERT Advisory CA-2002-09: Multiple Vulnerabilities in Microsoft IIS

1

CERT Advisory CA-2002-08: Multiple Vulnerabilities in Oracle Servers

1

CERT Incident Note IN-2002-03: Social Engineering Attacks via IRC and Instant Messaging

1

1

CERT Advisory CA-2002-26: Buffer Overflow in CDE ToolTalk

1

CERT Advisory CA-2002-20: Multiple Vulnerabilities in CDE ToolTalk

1

CERT Advisory CA-2002-25: Integer Overflow in XDR Library

1

CERT Advisory CA-2002-23: Multiple Vulnerabilities in OpenSSL

1

CERT Advisory CA-2002-22: Multiple Vulnerabilities in Microsoft SQL Server

1

CERT Advisory CA-2002-19: Buffer Overflows in Multiple DNS Resolver Libraries

1

1

CERT Advisory CA-2002-18: OpenSSH Vulnerabilities in Challenge Response Handling

1

CERT Advisory CA-2002-17: Apache Web Server Chunk Handling Vulnerability

1

CERT Advisory CA-2002-15: Denial-of-Service Vulnerability in ISC BIND 9

1

1

CERT Advisory CA-2002-27: Apache/mod_ssl Worm

1

CERT Advisory CA-2002-23: Multiple Vulnerabilities in OpenSSL

1

CERT Advisory CA-2002-28: Trojan Horse Sendmail Distribution

1

1

CERT Advisory CA-2002-30: Trojan Horse tcpdump and libpcap Distributions

1

1

CERT Advisory CA-2002-31: Multiple Vulnerabilities in BIND

1

1

CERT Advisory CA-2002-33: Heap Overflow Vulnerability in Microsoft Data Access Components (MDAC)

1

71

31

Cert Incidents Reports (http://www.cert.org/stats/)

[View full size image]