| 2.Network Monitoring Report
in March
This is a statistics report obtained
by monitoring access to each port of dedicated servers in IPA observation
environment.
135(TCP): This
port might be accessed by attackers who exploit the known security
holes in Microsoft Windows, or by W32/MSBlaster.
445(TCP): This
port might be accessed by attackers who exploit the known security
holes in Microsoft Windows.
3127(TCP): This port might
be accessed in order to search the backdoor created by the computer
infected with W32/Mydoom.
1025(TCP): This port might
be accessed by attackers who exploit the known security holes
in Microsoft Windows.
6129(TCP): This port might
be accessed by attackers who exploit the known security holes
in Dameware, a remote system management software.
2745(TCP): This port might
be accessed in order to search the backdoor opened in the computers
infected with W32/Bagle.
3.Vulnerability Information
published in March
IPA published the following information
related to the vulnerability announced by other organizations.
Microsoft
- A Vulnerability in Windows
Media Service could cause Denial of Service (MS04-008).
- A Vulnerability in Outlook could allow code
execution (MS04-009).
- A Problem of ISAPI Extension in Windows Media
Service could allow code execution (MS03-022 update).
CIAC
- A Vulnerability in Adobe Acrobat
Reader 5.1 .
Symantec
- Vulnerabilities in Norton Internet
Security and Norton Antispam.
ISS
- A Vulnerability in ICQ analysis
in ISS products.
Apache
- A Release of security updates
for Apache version 2.0 series.
Cisco
- A Vulnerability in Content Servers
Switch in CSS 1000 series.
OpenSSL
- Multiple vulnerabilities in OpenSSL.
FreeBSD
- A Vulnerability in packet processing.
IBM
- A Vulnerability in IBM AIX rexecd
could lead to privilege escalation.
Macromedia
- Vulnerabilities
of Web Services in ColdFusion MX and JRun 4.0.
WinZip
- A Vulnerability in WinZip could
cause buffer overflow.
For more information, visit the URL below.
[Vulnerability Related information in February, 2004] (in Japanese)
http://www.ipa.go.jp/security/news/news0403.html
| Unauthorized Computer Access Reporting
Program
The Ministry of Economy, Trade and Industry announced "Unauthorized
Computer Access Prevention Guidelines" to prevent the
spread of unauthorized computer access in Japan. IPA was designated
to receive the "Unauthorized Computer Access Report"
directly from damaged users to investigate unauthorized computer
access problem and to provide monthly statistics. This reporting
system started in August 1996. Anyone who has encountered
unauthorized computer access is supposed to send an unauthorized
computer access report with necessary information to IPA to
prevent further spread and damage of unauthorized computer
access. IPA deals with each reporter (user) on an individual
basis as a consultant, and also works as a public research
institute for unauthorized computer access measures by analyzing
problems showed on the damage report. Taking reporters' privacy
into full consideration, IPA periodically publishes the result
of their research and analysis on unauthorized computer access.
Unauthorized Computer Access Prevention Guidelines
- Enactment on August 8, 1996 (release No.362)
- Amendment on September 24, 1997 (release No. 534)
- Amendment on December 28, 2000 (release No. 950)
- Amendment on January 5, 2004 (release No. 3) |
|
Japanese
backnumber
