[ISN] CIAC Advisories

Today's ISN Sponsor: Repent Security Incorporated

[Moderator: Odds are most of the list knows about the following
 advisories. If not, here is the relevant information. While not always
 very technical or informative to technical admins, CIAC does a fairly
 good job staying current with security concerns. Personally, I like the
 CIAC advisories over CERT and like institutions.

 For a complete archive of CIAC advisories: ftp.sekurity.org
 /pub/security/advisories/ciac ]


                       The U.S. Department of Energy
                    Computer Incident Advisory Capability

                  Sun Solaris Vulnerabilities (ndd, rpc.cmsd)

[snip...]

March 12, 1998 19:00 GMT                                          Number I-033

   World Wide Web:      http://www.ciac.org/
                        (or http://ciac.llnl.gov -- they're the same machine)
   Anonymous FTP:       ftp.ciac.org
                        (or ciac.llnl.gov -- they're the same machine)
   Modem access:        +1 (510) 423-4753 (28.8K baud)
                        +1 (510) 423-3331 (28.8K baud)

CIAC has several self-subscribing mailing lists for electronic
publications:
1. CIAC-BULLETIN for Advisories, highest priority - time critical
   information and Bulletins, important computer security information;
2. SPI-ANNOUNCE for official news about Security Profile Inspector
   (SPI) software updates, new features, distribution and
   availability;
3. SPI-NOTES, for discussion of problems and solutions regarding the
   use of SPI products.

E-mail to       ciac-listproc@llnl.gov or majordomo@tholia.llnl.gov:
        subscribe list-name
  e.g., subscribe ciac-bulletin


I-023: Macro Virus Update
I-024: CGI Security Hole in EWS1.1 Vulnerability
I-025A: Windows NT based Web Servers File Access Vulnerability
I-026: Vulnerability in ssh-agent
I-027B: HP-UX Vulnerabilities (CUE, CDE, land)
I-028: Vulnerabilities in CDE
I-029: IBM AIX Telnet Denial-of-Service Vulnerability
I-030: SunOS volrmmount (1) Vulnerability
I-031A: WindowsNT-95 Attacks on DOE Sites
I-032: Sun Solaris Vulnerabilities (vacation, dtaction)


If you wish to receive ISN directly, mail majordomo@sekurity.org with "subscribe isn".
ISN is a non-profit list designed to keep Security Professionals aware.