Mailing Lists & Feeds
Current Activity Calendar
| June 16, 2006 - Current ActivityThis is an archived copy of current activity, if you would like to see the most recent version, please click here.Active Exploitation of a Vulnerability in Microsoft Exceladded June 16, 2006 | updated June 16, 2006US-CERT is aware of active exploitation of a new vulnerability in Microsoft Excel. Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the user running Excel. More information about this vulnerability can be found in the following:
We are continuing to investigate this vulnerability. US-CERT recommends the following actions to help mitigate the security risks:
Additionally, US-CERT strongly encourages users not to open unfamiliar or unexpected email attachments, even if sent by a known and trusted source. Users may wish to read Cyber Security Tip ST04-010 for more information on working with email attachments. FDIC Phishing Scamadded June 16, 2006US-CERT continues to receive reports of phishing scams that target online users. Recently, the phishing scam targeted the customers of Federal Deposit Insurance Company (FDIC) insured institutions. Customers of FDIC institutions received a spoofed email message, which claims that their account is in violation of the Patriot Act, and that FDIC insurance has been removed from their account until their identity can be verified. The message provides a link to a malicious web site which prompts users to enter their customer account and identification information. If you were affected by the FDIC phishing scam, please refer to the FDIC Consumer Alert for assistance. US-CERT confirms that the federal agencies including Department of Homeland Security (DHS) mentioned in the fraudulent email have not sent out an email that requests customer account or identification information. US-CERT encourages users to report phishing incidents based on the following guidelines:
Additionally, users are encouraged to take the following measures to prevent phishing attacks from occurring:
Vulnerability in Symantec AntiVirus Softwareadded May 26, 2006 | updated May 30, 2006US-CERT is aware of a buffer overflow vulnerability in Symantec Client Security and Symantec Antivirus Corporate Edition. Successful exploitation may allow a remote, unauthenticated attacker to execute arbitrary code with SYSTEM privileges. We are not aware of any public exploits at this time. More information about this vulnerability can be found in the following:
We will continue to update current activity as more information becomes available. Active Exploitation of a Vulnerability in Microsoft Wordadded May 19, 2006 | updated May 26, 2006US-CERT is aware of an increase in activity attempting to exploit a vulnerability in Microsoft Word. The exploit is disguised as an email attachment containing a Microsoft Word document. When the document is opened, malicious code is installed on the user's machine. The exploit then attempts to connect to a remote host. More information about the reported vulnerability can be found in the following:
US-CERT recommends the following actions to mitigate the security risks:
Additionally, US-CERT strongly encourages users not to open unfamiliar or unexpected email attachments, even if sent by a known and trusted source. Users may wish to read Cyber Security Tip ST04-010 for more information on working with email attachments. We will continue to update current activity as more information becomes available. Recent Data Theft of Veterans Affairs Dataadded May 25, 2006US-CERT continues to receive reports of data theft that targets online users and Federal government web sites. Recently, Veteran Affairs data was stolen from the home computer system of a Veterans Affairs (VA) employee. This data contained large amounts of personally identifiable information, such as, names, social security numbers, and dates of birth. Over 26 million veterans and some spouses are affected by this incident. The VA is continuing to investigate this issue and working to inform affected parties of this incident so that the appropriate steps can be taken to protect against this information being misused. If you believe you may be affected by this incident or would like additional information, please refer to the Veterans Affairs web site. Additionally, US-CERT recommends that users take the following measures to protect against data theft:
Public Exploit Code for Unpatched Vulnerability in Oracleadded May 2, 2006 | updated May 22, 2006US-CERT is aware of publicly available, working exploit code for an unpatched vulnerability in Oracle Export Extensions. Successful exploitation may allow a remote attacker with some authentication credentials to execute arbitrary SQL statements with elevated privileges. This may allow an attacker to access and modify sensitive information within an Oracle database. More information about this vulnerability can be found in the following:
US-CERT recommends the following actions to mitigate the security risks:
We will continue to update current activity as more information becomes available. Public Exploit Code for a Vulnerability in RealVNC Serveradded May 18, 2006US-CERT is aware of publicly available exploit code for a vulnerability in RealVNC Server. More information about the reported vulnerability can be found in the following:
US-CERT recommends the following actions to mitigate the security risks:
We will continue to update current activity as more information becomes available. Public Exploit Code for a Vulnerability in Sendmailadded April 19, 2006 | updated April 20, 2006US-CERT is aware of publicly available exploit code for a race condition vulnerability in Sendmail. US-CERT does not believe that this exploit code works at this time. More information about the reported vulnerability can be found in the following:
US-CERT recommends the following actions to mitigate the security risks:
We will continue to update current activity as more information becomes available. Active Exploitation of Cross-site Scripting Vulnerability in eBay.comadded April 3, 2006 | updated April 13, 2006US-CERT is aware of an active exploitation of a cross-site scripting vulnerability in the eBay website. Successful exploitation may allow an attacker to take various actions, including the following:
More information about the reported vulnerability can be found in the following:
Until a practical solution or more information becomes available, US-CERT recommends the following:
We will continue to update current activity as more information becomes available. Exploit for Vulnerability in Microsoft Internet Exploreradded March 22, 2006 | updated April 12, 2006US-CERT is aware of an active exploitation of a vulnerability in the way Microsoft Internet Explorer handles certain DHTML methods. By persuading a user to access a specially crafted webpage, a remote, unauthenticated attacker may be able to execute arbitrary code on that user's system, or cause Internet Explorer to stop functioning. More information about the reported vulnerability can be found in the following Vulnerability Note:
Known attack vectors for this vulnerability require that Active Scripting is enabled in Internet Explorer. Disabling Active Scripting will reduce the chances of exploitation. US-CERT recommends the following:
|
|||||||||||||||||||||||||||||||||||||||||||||||||||
Information For
Sign Up
Reporting
