Archive of CERT general posting, CERT Summary CS-99-05

18/12/99, CERT Summary CS-99-05
From: CERT Advisory <>

Generated by MHonArc

CSIM Logo WelcomeCourses
Faculty, Student, Staff
Projects and reports
Conferences, workshop and seminars
Laboratories and reasearch facilities
Information related to CSIM
Information non-related to CSIM
Address, map, phone, etc.

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Subject: CERT Summary CS-99-05
From: CERT Advisory <>
Date: Fri, 17 Dec 1999 16:59:21 -0500 (EST)
Organization: CERT(sm) Coordination Center - +1 412-268-7090

Hash: SHA1

CERT Summary CS-99-05

   December 17, 1999
   Each quarter, the CERT Coordination Center (CERT/CC) issues the CERT
   summary to draw attention to the types of attacks reported to our
   incident response team, as well as other noteworthy incident and
   vulnerability information. The summary includes pointers to sources of
   information for dealing with the problems. Occasionally, "special
   editions" such as this one are published.
   Past CERT summaries are available from
"CERT/CC Current Activity" Web Page

   The CERT/CC Current Activity web page is a regularly updated summary
   of the most frequent, high-impact types of security incidents and
   vulnerabilities currently being reported to the CERT/CC. It is
   available from
   The information on the Current Activity page will be reviewed and
   updated as reporting trends change.
Year 2000 (Y2K) Information

   The CERT/CC has recently published web pages to assist sites in
   dealing with Y2K-related security issues.
   Y2K FAQ - Our Y2K FAQ has been extensively revised in collaboration
          with participants in the International Y2K workshop held in
          October 1999. The FAQ includes information to help sites
          determine whether a failure is Y2K related or an attack. The
          FAQ is available at

   Expectations During Y2K - "Cyber Infrastructure and Malicious
          Expectations during the Y2K Transition Period," also a
          collaborative effort by members of the Threat Analysis Working
          Group at the International Y2K Workshop, discusses potential
          activities associated with Y2K and offers recommendations. This
          paper is available at

   Year 2000 Computer Viruses and Hoaxes - This web page lists the
          approximate number of reports the CERT/CC has received on
          viruses and hoaxes that reference Y2K. There are also links to
          anti-virus vendors having Y2K virus and hoax web pages. Our
          list is available at

   Y2K status reports - During the Y2K event, the CERT/CC will publish
          regular reports on our web site to inform the community of
          activity being reported to us by other response teams and
          sites. Those reports will be available at

   Reporting new security information
   We encourage sites that discover new vulnerabilities or witness new
   types of attacks to report those to us by sending electronic mail to
   Backup CERT hotline
   During the Y2K event, we will have backup hotline in case of a
   telecommunications failure with our primary hotline. The backup
   hotline phone number is
   +1 412 818-3442
   This backup hotline will be staffed only if the primary hotline fails.
Results of the Distributed-Systems Intruder Tools (DSIT) Workshop

   In November 1999, experts addressed issues surrounding
   distributed-systems intruder tools. A paper now available at the
   CERT/CC web site is one outcome of the DSIT Workshop. In it, workshop
   participants examine the use of distributed-system intruder tools and
   provide information about protecting systems from attack by the tools,
   detecting the use of the tools, and responding to attacks. The paper
   is available at
Ongoing Intruder Activity

   Distributed denial-of-service tools are continuing to be found on
   compromised hosts. In addition to the information provided by the
   Distributed-Systems Intruder Tools Workshop mentioned above, please
   Intruders continue to exploit a vulnerability in the am-utils package
   to gain root access to victim machines. For details, see
   Finally, RPC service vulnerabilities are still being regularly
   exploited: rpc.ttdbserverd, rpc.cmsd, statd-automound. Details and
   pointers to additional information can be found in
   This document is available from:
CERT/CC Contact Information

          Phone: +1 412-268-7090 (24-hour hotline)
          Fax: +1 412-268-6989
          Postal address:
          CERT Coordination Center
          Software Engineering Institute
          Carnegie Mellon University
          Pittsburgh PA 15213-3890
   CERT personnel answer the hotline 08:00-20:00 EST(GMT-5) / EDT(GMT-4)
   Monday through Friday; they are on call for emergencies during other
   hours, on U.S. holidays, and on weekends.
Using encryption

   We strongly urge you to encrypt sensitive information sent by email.
   Our public PGP key is available from
   If you prefer to use DES, please call the CERT hotline for more
Getting security information

   CERT publications and other security information are available from
   our web site
   To be added to our mailing list for advisories and bulletins, send
   email to and include SUBSCRIBE
   your-email-address in the subject of your message.
   Copyright 1999 Carnegie Mellon University.
   Conditions for use, disclaimers, and sponsorship information can be
   found in
   * "CERT" and "CERT Coordination Center" are registered in the U.S.
   Patent and Trademark Office.
   Any material furnished by Carnegie Mellon University and the Software
   Engineering Institute is furnished on an "as is" basis. Carnegie
   Mellon University makes no warranties of any kind, either expressed or
   implied as to any matter including, but not limited to, warranty of
   fitness for a particular purpose or merchantability, exclusivity or
   results obtained from use of the material. Carnegie Mellon University
   does not make any warranty of any kind with respect to freedom from
   patent, trademark, or copyright infringement.

Version: PGP for Personal Privacy 5.0
Charset: noconv


Previous message sorted by date: CERT Summary CS-99.04
Previous message sorted by thread: CERT Summary CS-99.04
Main Index
Thread Index

CSIM home pageWMailAccount managementCSIM LibraryNetwork test toolsSearch CSIM directories
Contact us: Olivier Nicole CSIM    SET    AIT Last update: Feb 2000