04-23-2002, 04:29 AM
<br> <br> <br> <br> Options<br><br>Advisories<br>Vulnerability Notes Database<br><br>Incident Notes<br><br>Current Activity<br><br><br> <br> <br> Related <br> Summaries<br>Tech Tips<br><br>AirCERT<br><br>Employment Opportunities <br><br><br> <br> <br> more links <br> CERT Statistics<br>Vulnerability Disclosure Policy<br><br>CERT Knowledgebase<br><br>System Administrator courses<br><br>CSIRT courses<br><br>Other Sources of Security Information<br><br>Channels <br><br><br> <br> <br> Message <br> Members of the CERT/CC staff have produced the paper Trends in Denial of Service Attack Technology (pdf).<br><br> <br> Related Sites <br><br><br><br> <br> <br><br><br>We strive to make users aware of potential threats to the security of their systems and to provide information about how to avoid, minimize, or recover from the damage. Because users are our primary source of information, we encourage you to report any incidents you experience on your systems or any vulnerabilities you find. These reports will help us inform you and others about potential threats and ways to avoid or recover from them. <br><br><br> <br> <br> Current Activity <br><br><br> Latest Version: Mon Apr 22 14:52:23 EDT 2002 <br>includes these topics:<br><br>Social Engineering Attacks via IRC and Instant Messaging<br><br>W32/Klez<br><br>Scans and Probes <br> <br><br>Recent Advisories & Incident Notes <br><br>CA-2002-09<br>Multiple Vulnerabilities in Microsoft IIS<br>IN-2002-03<br>Social Engineering Attacks via IRC and Instant Messaging<br><br>CA-2002-08<br>Multiple Vulnerabilities in Oracle Servers<br><br>IN-2002-02<br>W32/Gibe Malicious Code<br><br>CA-2002-07<br>Double Free Bug in zlib Compression Library <br><br>CA-2002-06<br>Vulnerabilities in Various Implementations of the RADIUS Protocol<br><br>CA-2002-05<br>Multiple Vulnerabilities in PHP fileupload<br><br>CA-2002-04<br>Buffer Overflow in Microsoft Internet Explorer<br><br>CA-2002-03<br>Multiple Vulnerabilities in Many Implementations of the Simple Network Management Protocol (SNMP)<br><br>more Advisories | more Incident Notes <br><br><br>Vulnerability Notes <br><br>Browse the Vulnerability Notes Database at http://www.kb.cert.org/vuls<br><br> <br> <br> <br><br> <br> <br> Customized Search <br> <br> <br><br> Communicate with Us <br><br><br>Report an Incident<br>Interactive Incident Reporting | Text Version <br><br><br>Incident Reporting Guidelines <br>Report a Vulnerability<br><br>--------------------------------------------------------------------------------<br><br>Sending Sensitive Information <br>Subscribing to our mailing list <br><br> <br> <br> Quick Fixes <br>Configuration <br>Home Network Security <br>Windows NT Configuration Guidelines <br>UNIX Configuration Guidelines <br>UNIX Security Checklist New Version 2.0 <br>Anonymous FTP Configuration Guidelines <br>Recovery <br>Steps for Recovering from a UNIX or NT Compromise <br>Intruder Detection Checklist <br>more Tech Tips <br> <br> <br> <br> Presentations & Reports <br><br>Overview of Attack Trends (pdf) <br><br>Cross-Site Scripting Vulnerabilities (pdf) <br><br>Managing the Threat of Denial-of-Service Attacks (pdf) <br><br>Trends in Denial of Service Attack Technology (pdf)<br><br><br>CERT/CC Overview and Intruder Trends (html)<br><br>Results of the Security in ActiveX Workshop (pdf) <br> <br><br>all Presentations | all Papers<br> <br> <br> <br> <br><br>Disclaimers and copyright information | Last updated April 22, 2002 14:52:23 EDT | Printable version of this portal <br><br>