Advisories 2002

• FA-2002-37 :Buffer Overflow in Microsoft Windows Shell
  Released (12/19/02)

• FA-2002-36 :Multiple Vulnerabilities in SSH Implementations
  Released (12/16/02)

• FA-2002-35: Vulnerability in RaQ Server Appliances
  Released (12/11/02)

• FA-2002-34: Buffer Overflow in Solaris X Window Font Service
  Released (11/25/02)

• FA-2002-33: Heap Overflow Vulnerability in Microsoft Data Access Components (MDAC)
  Released (11/21/02)

• FA-2002-32: Backdoor in Alcatel OmniSwitch AOS
  Released (11/21/02)

• FA-2002-31: Multiple Vulnerabilities in BIND
  Released (11/14/02)

• FA-2002-30: Trojan Horse tcpdump and libpcap Distributions
  Released (11/13/02)

• FA-2002-29: Buffer Overflow in Kerberos Administration Daemon
  Released (10/25/02)

• FA-2002-28: Trojan Horse Sendmail Distribution
  Released (10/8/02)

• FA-2002-27: Apache/mod_ssl Worm
  Released (9/14/02)

• FA-2002-26: Buffer Overflow in CDE ToolTalk
  Released (8/12/02)

• FA-2002-25: Integer Overflow In XDR Library
  Released (8/5/02)

• FA-2002-24: Trojan Horse OpenSSH Distribution
  Released (8/1/02)

• FA-2002-23: Multiple Vulnerabilities in OpenSSL
  Released (7/30/02)

• FA-2002-22: Multiple Vulnerabilities in Microsoft SQL Server
  Released (7/29/02)

• FA-2002-21: Vulnerability in PHP
  Released (7/22/02)

• FA-2002-20: Multiple Vulnerabilities in CDE ToolTalk
  Released (7/10/02)

• FA-2002-19: Buffer Overflows in Multiple DNS Resolver Libraries
  Released (6/28/02)

• FA-2002-18: OpenSSH Vulnerabilities in Challenge Response Handling
  Released (6/26/02)

• FA-2002-17: Apache Web Server Chunk Handling Vulnerability
  Released (7/17/02)

• FedCIRC Advisory FA-2002-16 Multiple Vulnerabilities in Yahoo! Messenger
  Released (06/05/02)
• FedCIRC Advisory FA-2002-15 Denial-of-Service Vulnerability in ISC BIND 9
  Released (06/04/02)
• FedCIRC Advisory FA-2002-14 Buffer Overflow in Macromedia JRun
  Released (05/29/02)
• FedCIRC Advisory FA-2002-13 Buffer Overflow in Microsoft's MSN Chat ActiveX Control
  Released (05/10/02)
• FedCIRC Advisory FA-2002-12 Format String Vulnerability in ISC DHCPD
  Released (05/08/02)
• FedCIRC Advisory FA-2002-11 Heap Overflow in Cachefs Daemon (cachefsd)
  Released (05/06/02)
• FedCIRC Advisory FA-2002-10 Format String Vulnerability in rpc.rwalld
  Released (05/01/02)
• FedCIRC Advisory FA-2002-09 Multiple Vulnerabilities in Microsoft IIS
  Released (04/11/02)
• FedCIRC Advisory FA-2002-08 Multiple Vulnerabilities in Oracle Servers
  Released (03/14/02)
• FedCIRC Advisory FA-2002-07 Double Free Bug in zlib Compression Library
  Released (03/12/02)
• FedCIRC Advisory FA-2002-06 Vulnerabilities in Various Implementations of the RADIUS Protocol
  Released (03/04/02)
• FedCIRC Advisory FA-2002-05 Multiple Vulnerabilities in PHP fileupload
  Released (02/27/02)
• FedCIRC Advisory FA-2002-04 Buffer Overflow in Microsoft Internet Explorer
  Released (02/25/02)
• FedCIRC Advisory FA-2002-03 Multiple Vulnerabilities in Many Implementations of the Simple Network Management Protocol (SNMP)
  Released (02/12/02)
• FedCIRC Advisory FA-2002-02 Buffer Overflow in AOL ICQ
  Released (01/24/02)
• FedCIRC Advisory FA-2002-01 Exploitation of Vulnerability in CDE Subprocess Control Service
  Released (01/14/02)