Destroy PC Viruses

Home

Montgomery County Animal Shelter Search Engine Poisoning Campaign

Thursday, 08 October 2009 20:51 |

US-CERT is aware of public reports regarding a search engine result poisoning campaign affecting search results for the Montgomery County Animal Shelter. Users seeking details on rumors about the closure of a "Montgomery County Animal Shelter" may be led to click on illegitimate search results which attempt to download malicious code. The rumors are being spread via e-mail, forums, and social networking sites, usually taking the form of a plea for readers to contact the shelter and adopt animals prior to the shelter's closing.

US-CERT is monitoring the situation and will provide updates as they become available.

Cisco Releases Multiple Security Advisories for IOS Vulnerabilities and Unified Communications Manager

Thursday, 08 October 2009 20:51 |

Cisco has released multiple security advisories to address vulnerabilities in IOS Software and Unified Communications Manager. These vulnerabilities may allow an attacker to cause a denial-of-service
condition, buffer overflow, or access control list bypass.

US-CERT encourages users and administrators to review the following Cisco security advisories and apply any necessary updates to help mitigate the risks.

cisco-sa-20090923-acl : Cisco IOS Software Object-group Access Control List Bypass Vulnerability
cisco-sa-20090923-auth-proxy : Cisco IOS Software Authentication Proxy Vulnerability
cisco-sa-20090923-cm : Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability
cisco-sa-20090923-cme : Cisco Unified Communications Manager Express Vulnerability
cisco-sa-20090923-h323 : Cisco IOS Software H.323 Denial of Service Vulnerability
cisco-sa-20090923-ios-fw : Cisco IOS Software Zone-Based Policy Firewall Vulnerability
cisco-sa-20090923-ipsec : Cisco IOS Software Internet Key Exchange Resource Exhaustion Vulnerability
cisco-sa-20090923-ntp : Cisco IOS Software Network Time Protocol Packet Vulnerability
cisco-sa-20090923-sip : Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability
cisco-sa-20090923-tls : Cisco IOS Software Crafted Encryption Packet Denial of Service Vulnerability
cisco-sa-20090923-tunnels : Cisco IOS Software Tunnels Vulnerability

Microsoft Releases Fix It for SMB Vulnerability

Thursday, 08 October 2009 20:51 |

Microsoft has released Microsoft Knowledge Base Article 975497 to address a previously reported vulnerability in Microsoft Sever Message Block (SMB). This vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition.

US-CERT encourages users and administrators to review Microsoft Knowledge Base Article 975497 and Microsoft Security Advisory 975497 and apply the Fix it tool or workarounds. Microsoft Knowledge Base Article 975497 addresses the vulnerability that was previously reported in the "Microsoft Releases Security Advisory 975497" Current Activity entry.

US-CERT is aware that exploit code for this vulnerability has been made publicly available as part of the Metasploit Framework. Users and system administrators are strongly encouraged to apply the Microsoft Fix it solution or other workarounds until a patch is released.

Malicious Code Spreading via IRS Scam

Thursday, 08 October 2009 20:51 |

US-CERT is aware of public reports of malicious code circulating via spam email messages related to the IRS. The attacks arrive via an unsolicited email message and may contain a subject line of "Notice of Underreported Income." These messages may contain a link or attachment. If users click on this link or open the attachment, they may be infected with malicious code, including the Zeus Trojan.

US-CERT encourages users and administrators to take the following measures to protect themselves:

Review the How to Report and Identify Phishing, E-mail Scams and Bogus IRS Web Sites document on the IRS website.
Do not follow unsolicited web links or attachments in email messages.
Maintain up-to-date antivirus software.
Refer to the Recognizing and Avoiding Email Scams (pdf) document for more information on avoiding email scams.
Refer to the Avoiding Social Engineering and Phishing Attacks document for more information on social engineering attacks.

Research in Motion Releases Security Advisory

Thursday, 08 October 2009 20:51 |

Research in Motion has released a security advisory to address a vulnerability related to how null characters are displayed in a BlackBerry dialog box. This vulnerability may allow an attacker to trick users into believing that they are connecting to a trusted secure site.

US-CERT encourages users to review the BlackBerry security advisory KB19552 and apply any necessary updates.

<< Start < Prev 21 22 23 24 25 26 Next > End >>

Page 25 of 26