- Test - lists.nanog.org

CERT Advisory - OpenVMS and OpenVMS AXP Vulnerability
by CERT Advisory 24 Feb '93

24 Feb '93

=========================================================================== CA-93:05 CERT Advisory February 24, 1993 OpenVMS and OpenVMS AXP Vulnerability --------------------------------------------------------------------------- The CERT Coordination Center has received information concerning a potential vulnerability with Digital Equipment Corporation's OpenVMS and OpenVMS AXP. This vulnerability is present in OpenVMS V5.0 through V5.5-2 and OpenVMS AXP V1.0 but has been corrected in OpenVMS V6.0 and OpenVMS AXP V1.5. The Software Security Response Team at Digital Equipment Corporation has provided the following information concerning this vulnerability. For additional information, please contact your local Digital Equipment Corporation customer service representative. Beginning of Text Provided by Digital Equipment Corporation ============================================================================== 23.FEB.1993 SOURCE: Digital Equipment Corporation AUTHOR: Software Security Response Team Colorado Springs USA PRODUCT: OpenVMS V5.0 through V5.5-2 & OpenVMS AXP V1.0 PROBLEM: Potential Security Vulnerability - OpenVMS SOLUTION: A remedial kit is now available for OpenVMS AXP V1.0 and OpenVMS V5.0 through V5.5-2 (including all SEVMS versions V5.1 through V5.5-2 as applicable) by contacting your normal Digital Services Support organization. SEVERITY LEVEL: High This potential vulnerability has been corrected in the next release of OpenVMS V6.0 and OpenVMS AXP V1.5. For VMS Versions prior to OpenVMS V5.0, Digital strongly recommends that you upgrade to a minimum of OpenVMS V5.0 and further, to the latest release of OpenVMS V5.5-2. ------------------------------------------------------------------------- The remedial kits may be identified as: VAXSYS01_U2050 VMS V5.0, V5.0-1, V5.0-2 VAXSYS01_U1051 VMS V5.1 VAXSYS01_U1052 VMS V5.2 VAXSYS01_U2053 VMS V5.3 thru V5.3-2 VAXSYS01_U3054 VMS V5.4 thru V5.4-3 VAXSYS02_U2055 OpenVMS V5.5 thru V5.5-2 AXPSYS01_010 OpenVMS AXP V1.0 ------------------------------------------------------------------------- Copyright (c) Digital Equipment Corporation, 1993 All Rights Reserved. Published Rights Reserved Under The Copyright Laws Of The United States. ------------------------------------------------------------------------- ADVISORY INFORMATION: ------------------------------------------------------------------------- This update kit corrects a potential security vulnerability in the OpenVMS VAX and OpenVMS AXP operating systems. This potential vulnerability may be further exploited in the form of a malicious program that may allow authorized but unprivileged users to obtain all system privileges, potentially giving the unprivileged user control of your OpenVMS system and data. NOTE: The update kit must be applied if an update or installation is performed for all versions prior to OpenVMS V6.0 or OpenVMS AXP V1.5. For VMS Versions prior to OpenVMS V5.0, Digital strongly recommends that you upgrade to a minimum of OpenVMS V5.0 and further to the latest release of OpenVMS V5.5-2. ------------------------------------------------------------------------- INFORMATION: ------------------------------------------------------------------------- Digital strongly recommends that you install the available kit on your system(s), to avoid any potential vulnerability as a result of this problem. Customers with a Digital Services contract may obtain a kit for the affected versions of OpenVMS by contacting your normal support organizations. - In the U.S. Customers may contact the Customer Support Center at 1(800)354-9000 and request the appropriate kit for your version of OpenVMS, or through DSNlink Text Search database using the keyword text "Potential Security Vulnerability", or DSNlink VTX using the patch number 1084. - Customers in other geographies should contact their normal Digital Services support organizations. As always, Digital recommends you to regularly review your system management and security procedures. Digital will continue to review and enhance security features, and work with our customers to further improve the integrity of their systems. ============================================================================== End of Text Provided by Digital Equipment Corporation ------------------------------------------------------------------------------ The CERT Coordination Center wishes to thank Digital Equipment Corporation's Software Security Response Team for their response to this problem. ------------------------------------------------------------------------------ If you believe that your system has been compromised, contact the CERT Coordination Center or your representative in FIRST (Forum of Incident Response and Security Teams). Internet E-mail: cert(a)cert.org Telephone: 412-268-7090 (24-hour hotline) CERT personnel answer 7:30 a.m.-6:00 p.m. EST(GMT-5)/EDT(GMT-4), on call for emergencies during other hours. CERT Coordination Center Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 Past advisories, information about FIRST representatives, and other information related to computer security are available for anonymous FTP from cert.org (192.88.209.5).

1 0

Re: ASCOM Baseband Modem AN6400 : DO you know this product ?
by Keith Jackson 23 Feb '93

23 Feb '93

ASCOM AND TIMEPLEX ARE ONE AND THE SAME (ASCOM TIMEPLEX). YOU CAN CONTACT THEM AT 201-930-4641. THIS IS A SALES OFFICE BUT THEY KNOW THE PRODUCT LINE. KEITH

1 0

ASCOM Baseband Modem AN6400 : DO you know this product ?
by Pushpendra Mohta 23 Feb '93

23 Feb '93

(1) Does any one have any knowledge of this product ? ASCOM Baseband Modem AN6400 ( Based on second hand information , this may be a unit made by Northern Telecom ) There is a NSF sponsored experiment going online in Fiji this week and this CSU/DSU equivalent is required to connect to a Cisco to provide Internet connectivity. The local telco is only able to provide this unit and I want to know if it will work with a Cisco box ( I am also awaiting response from the Fiji Telco people, but they have never done anything like this before ) (2) The unit comes with a X.121 connector. ( as opposed to a V.35 ) Some other jargon thrown at me was ISO 4903 compliant and X21 bis Do we know this by some other name in the US ? Thanks much --pushpendra Pushpendra Mohta pushp(a)cerf.net +1 619 455 3908 Director of Engineering pushp(a)sdsc.bitnet +1 800 876 2373 CERFNet

1 0

Additions to the NSFNET policy-based routing database
by Steven K. Widmayer 23 Feb '93

23 Feb '93

The following additions have been made to the NSFNET policy-based routing database and will be installed on the backbone by 08:00 EST: Total configured networks: 9349 IP address Net name Country Date Priority:AS ---------- -------- ------- ---- ----------- 131.241 NECAM C:US D:02/22/93 1:200 2:201 137.28 UWEC C:US D:02/22/93 1:1225 2:267 3:266 156.151 PORTAL-B C:US D:02/22/93 1:200 2:201 160.107 NAVAIRHQ-NET C:US D:02/22/93 1:19 2:568 162.127 NEBNET C:US D:02/22/93 1:1800 2:1240 192.32.253 WELLFLEET-TMP-1 C:US D:02/23/93 1:560 2:281 192.54.253 TCLARINET C:US D:02/22/93 1:200 2:201 192.86.119 NCMBRLNDNET1 C:US D:02/22/93 1:19 2:568 192.104.19 INDIANANET C:US D:02/22/93 1:267 2:266 3:1225 192.138.203 TITAN-ABQ2 C:US D:02/22/93 1:209 2:210 192.156.218 NWNEXUS-NETC C:US D:02/22/93 1:1331 192.203.238 MS-NET C:US D:02/22/93 1:174 192.207.46 NWNEXUS-NET2-46 C:US D:02/22/93 1:1331 192.207.47 NWNEXUS-NET2-47 C:US D:02/22/93 1:1331 192.215.12 NETBLK-CERFNET-12 C:US D:02/23/93 1:1740 192.233.10 ROSAPARKS C:US D:02/22/93 1:560 2:281 5:701 192.239.30 GIT-SUB15 C:US D:02/22/93 1:279 2:86 192.239.48 ADVANTIS C:US D:02/22/93 1:279 2:86 198.22.28 DISA-PAC C:US D:02/22/93 1:19 2:568 198.51.249 SKID-NET C:US D:02/22/93 1:1331 198.67.1 GRNLNK C:US D:02/22/93 1:1800 2:1240 198.67.64 USIABLK01 C:US D:02/22/93 1:1800 2:1240 Network IP: 131.241 Network Name: NECAM Location: NEC America Inc., Transmission Development Division, 110 Rio Robles, San Jose, CA 95134, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 137.28 Network Name: UWEC Location: University of Wisconsin - Eau Claire, Eau Claire, WI 54702-4004, USA Country Code: US 1:1225 CICNET at Argonne Labs 2:267 CICNET at UIUC 3:266 CICNET at MERIT Network IP: 156.151 Network Name: PORTAL-B Location: Portal Communications Company, 20863 Stevens Creek Boulevard, Suite 200, Cupertino, CA 95014, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 160.107 Network Name: NAVAIRHQ-NET Location: Naval Air Systems Command Headquarters, Room JP-1, Washington, DC 20361, USA Country Code: US 1:19 Milnet (FIX-East) 2:568 Milnet (FIX-West) Network IP: 162.127 Network Name: NEBNET Location: State of Nebraska, Division of Communications, P. O. Box 83111, Lincoln, NE 68501, USA Country Code: US 1:1800 ICM-Atlantic 2:1240 ICM-Pacific Network IP: 192.32.253 Network Name: WELLFLEET-TMP-1 Location: Wellfleet Communications Inc., 15 Crosby Drive, Bedford, MA 01730, USA Country Code: US 1:560 NEARnet Regional Network 2:281 NEARnet Regional Network Network IP: 192.54.253 Network Name: TCLARINET Location: ClariNet Communications Corp., 1113 Lochinvar Ave, Sunnyvale, CA 94087, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.86.119 Network Name: NCMBRLNDNET1 Location: Army Information Systems Command, New Cumberland Army Depot, Attn: ASQNC-DN-RP, Building 54, Bay 2, Computer Room, New Cumberland, PA 17070-5006, USA Country Code: US 1:19 Milnet (FIX-East) 2:568 Milnet (FIX-West) Network IP: 192.104.19 Network Name: INDIANANET Location: State of Indiana, Information Services Division, RM 1004, 100 N. Senate, Indianapolis, IN 46204, USA Country Code: US 1:267 CICNET at UIUC 2:266 CICNET at MERIT 3:1225 CICNET at Argonne Labs Network IP: 192.138.203 Network Name: TITAN-ABQ2 Location: Titan Corporation, 2340 Alamo SE, #300, Albuquerque, NM 87106, USA Country Code: US 1:209 Westnet Regional Network (Colorado Attachment) - ENSS 141 2:210 Westnet Regional Network (Utah Attachment) - ENSS 142 Network IP: 192.156.218 Network Name: NWNEXUS-NETC Location: Northwest Nexus Inc., P.O. Box 40597, Bellevue, WA 98015-4597, USA Country Code: US 1:1331 ANS Seattle - DNSS 91 Network IP: 192.203.238 Network Name: MS-NET Location: Micro Sage Software, 130 South First Street, Ann Arbor, MI 48104, USA Country Code: US 1:174 NYSERNet Regional Network / PSI Network IP: 192.207.46 Network Name: NWNEXUS-NET2-46 Location: Northwest Nexus Inc., P.O. Box 40597, Bellevue, WA 98015-4597, USA Country Code: US 1:1331 ANS Seattle - DNSS 91 Network IP: 192.207.47 Network Name: NWNEXUS-NET2-47 Location: Northwest Nexus Inc., P.O. Box 40597, Bellevue, WA 98015-4597, USA Country Code: US 1:1331 ANS Seattle - DNSS 91 Network IP: 192.215.12 Network Name: NETBLK-CERFNET-12 Location: CERFnet, 3550 General Atomics Court, San Diego, CA 92121, USA Country Code: US 1:1740 CERFnet Network IP: 192.233.10 Network Name: ROSAPARKS Location: Graham And Parks School, 15 Upton Road, Cambridge, MA 02139, USA Country Code: US 1:560 NEARnet Regional Network 2:281 NEARnet Regional Network 5:701 Alternet Network IP: 192.239.30 Network Name: GIT-SUB15 Location: Georgia Institute of Technology, Office of Computing Services, 258 4th Street, Rich Building, Atlanta, GA 30332, USA Country Code: US 1:279 SURANET Regional Network (Georgia Tech) 2:86 SURANET Regional Network (College Park) Network IP: 192.239.48 Network Name: ADVANTIS Location: Advantis, 3101 West Dr. Martin Luther King Jr. Blvd., Tampa, FL 33607, USA Country Code: US 1:279 SURANET Regional Network (Georgia Tech) 2:86 SURANET Regional Network (College Park) Network IP: 198.22.28 Network Name: DISA-PAC Location: The Defense Information Systems Agency, DISA/DSSO/JCLCC, Room BF655A, The Pentagon, Washington, DC 20301, USA Country Code: US 1:19 Milnet (FIX-East) 2:568 Milnet (FIX-West) Network IP: 198.51.249 Network Name: SKID-NET Location: Gary Byers, P.O. Box 4037, Seattle, WA 98104, USA Country Code: US 1:1331 ANS Seattle - DNSS 91 Network IP: 198.67.1 Network Name: GRNLNK Location: MaxCom, 275 Wyman Street, Waltham, MA 02154, USA Country Code: US 1:1800 ICM-Atlantic 2:1240 ICM-Pacific Network IP: 198.67.64 Network Name: USIABLK01 Location: US Information Agency Computer Center, 330 Independence Ave. SW, Room G720, Washington, DC 20547, USA Country Code: US 1:1800 ICM-Atlantic 2:1240 ICM-Pacific ***************************************************************** The configuration reports which reflect today's update will be available for anonymous ftp on nis.nsf.net by 08:00 EST: configuration reports -- nis.nsf.net:nsfnet/announced.networks: ans_core.now as-as.now as-gw.now as-site.now as.now country.now gate-gw.now net-comp.now net-ter.now net-net.now netcount.now non-us.now nss-as.now nss-gw.now nss.now networks sorted by AS -- nis.nsf.net:nsfnet/announced.networks: nets.as_<AS number> NSS routing software configuration files -- nis.nsf.net:nsfnet/backbone.configuration: nss<NSS number>.t3p Please send all requests for configuration changes to nsfnet-admin(a)merit.edu using the NSFNET configuration forms. The forms are available on-line from the nis.nsf.net machine. Use ftp and the anonymous login to get on the machine. Do a "cd nsfnet/announced.networks" and get the files template.net, template.gate, and template.as. ******************************* --Steve Widmayer Merit/NSFNET skw(a)merit.edu --Riaz Taherzadeh-Yazdian NSFNET/ANSNET rty(a)ans.net

1 0

Additions to the NSFNET policy-based routing database
by Steven K. Widmayer 19 Feb '93

19 Feb '93

The following additions have been made to the NSFNET policy-based routing database and will be installed on the backbone by 08:00 EST: Total configured networks: 9331 IP address Net name Country Date Priority:AS ---------- -------- ------- ---- ----------- 139.133 UNIV-ABDN C:GB D:02/18/93 1:297 2:372 141.63 BAM-NET C:DE D:02/18/93 1:293 2:291 147.55 WA-DIS-NET C:US D:02/18/93 1:685 2:73 3:101 147.129 ITHACA C:US D:02/18/93 1:97 148.134 DUKEPOWER C:US D:02/19/93 1:174 148.206 TELEUAM C:MX D:02/18/93 1:278 148.222 UNACH C:MX D:02/18/93 1:278 148.236 UJAT C:MX D:02/18/93 1:278 149.148 AKHNET C:AT D:02/18/93 1:513 2:1800 157.97 NORTH C:CA D:02/19/93 1:2493 157.246 SPS-NET C:US D:02/18/93 1:685 2:73 3:101 158.21 MOBILNET1 C:US D:02/18/93 1:114 2:1700 158.22 MOBILNET2 C:US D:02/18/93 1:114 2:1700 158.23 MOBILNET3 C:US D:02/18/93 1:114 2:1700 158.24 MOBILNET4 C:US D:02/18/93 1:114 2:1700 158.25 MOBILNET5 C:US D:02/18/93 1:114 2:1700 158.26 MOBILNET6 C:US D:02/18/93 1:114 2:1700 160.45 FULAN C:DE D:02/18/93 1:293 2:291 164.58 ONENET C:US D:02/19/93 1:93 164.62 FTCNET C:US D:02/19/93 1:174 192.16.197 CWI-VARIA C:NL D:02/18/93 1:701 2:1800 192.67.245 JVNC-SLIP-J C:US D:02/18/93 1:97 192.67.246 JVNC-SLIP-K C:US D:02/18/93 1:97 192.67.247 JVNC-SLIP-L C:US D:02/18/93 1:97 192.83.232 MSMACN C:US D:02/18/93 1:279 2:86 192.154.10 DP7UP3 C:US D:02/18/93 1:701 2:702 3:279 192.154.68 ACSYS-NET C:US D:02/18/93 1:81 2:1327 192.154.69 ACSYS-NTX-NET C:US D:02/18/93 1:81 2:1327 192.154.70 ACSYS-NTP-NET C:US D:02/18/93 1:81 2:1327 192.154.71 ACSYS-SYS-NET C:US D:02/18/93 1:81 2:1327 192.154.75 NETTECH-NET C:US D:02/18/93 1:81 2:1327 192.154.76 DATAWATCH-NET C:US D:02/18/93 1:81 2:1327 192.156.135 CALRES C:US D:02/18/93 1:68 192.160.97 WSCNET3 C:US D:02/18/93 1:93 192.160.98 WSCNET4 C:US D:02/18/93 1:93 192.187.167 NETCOM70 C:US D:02/18/93 1:200 2:201 192.190.10 GDT1 C:US D:02/18/93 1:560 2:281 5:701 192.190.173 BANKI-NET C:HU D:02/18/93 1:513 2:1800 192.204.7 PDF C:US D:02/18/93 1:1206 2:204 192.207.22 CCSU-NET3 C:US D:02/18/93 1:280 192.233.11 SPCOT-SANDERS C:US D:02/18/93 1:560 2:281 5:701 192.239.29 GIT-SUB14 C:US D:02/18/93 1:279 2:86 192.251.128 MIDWESTERN C:US D:02/18/93 1:280 2:114 193.5.56 ARINET C:CH D:02/18/93 1:559 2:1800 193.5.60 PMOD C:CH D:02/18/93 1:559 2:1800 193.74.250 EUNET-BE C:BE D:02/19/93 1:701 2:1800 193.141.32 HQ-NEW1 C:DE D:02/18/93 1:1324 193.141.33 HQ-NEW2 C:DE D:02/18/93 1:1324 193.141.34 HQ-NEW3 C:DE D:02/18/93 1:1324 193.141.35 HQ-NEW4 C:DE D:02/18/93 1:1324 193.141.40 NEWXLINK0 C:DE D:02/18/93 1:1324 198.3.124 SANTEC C:US D:02/18/93 1:701 2:702 3:279 198.22.1 WYVERN C:US D:02/19/93 1:701 2:702 3:279 198.53.32 NETBLK-FONOROLA32 C:CA D:02/19/93 1:2493 198.53.64 NETBLK-FONOROLA64 C:CA D:02/19/93 1:2493 198.53.254 NETBLK-FONOROLA254 C:CA D:02/19/93 1:2493 198.59.129 NETBLK-WESTNET129 C:US D:02/19/93 1:209 2:210 Network IP: 139.133 Network Name: UNIV-ABDN Location: University of Aberdeen, Regent Walk, Aberdeen AB9 1FX, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 141.63 Network Name: BAM-NET Location: Bundesanstalt fuer Materialforschung und -pruefung, Labor 7.23, Unter den Eichen 87, D-W-1000 Berlin 45, GERMANY Country Code: DE 1:293 Energy Science Network (FIX-East) 2:291 Energy Science Network (FIX-West) Network IP: 147.55 Network Name: WA-DIS-NET Location: Department of Information Services, Washington State, DIS/TSD, Office Building 2, Olympia, WA 98504, USA Country Code: US 1:685 NorthWestNet Regional Network 2:73 NorthWestNet Regional Network 3:101 NorthWestNet Regional Network Network IP: 147.129 Network Name: ITHACA Location: Ithaca College, OIT, Phillips Hall, Danby Road, Ithaca, NY 14850, USA Country Code: US 1:97 JvNCnet Regional Network Network IP: 148.134 Network Name: DUKEPOWER Location: Duke Power Company, P.O. Box 1008 - M/S-C803D, Charlotte, NC 28201, USA Country Code: US 1:174 NYSERNet Regional Network / PSI Network IP: 148.206 Network Name: TELEUAM Location: Universidad Autonoma Metropolitana, Michoacan y Av. Purisima, Col. Vicentina, Mexico D.F. 09340, MEXICO Country Code: MX 1:278 Mexican Networks at NCAR Network IP: 148.222 Network Name: UNACH Location: Universidad Autonoma De Chiapas, Boulevar Dr. Belisario Dominguez, KM 1081 Biblioteca Central, 2' Nivel, Tuxtla Gutierrez, Chiapas 29000, MEXICO Country Code: MX 1:278 Mexican Networks at NCAR Network IP: 148.236 Network Name: UJAT Location: Universidad Juarez Autonoma de Tabasco, Av. Universidad S/N, Zona de la Cultura, Villahermosa, Tabasco 86100, MEXICO Country Code: MX 1:278 Mexican Networks at NCAR Network IP: 149.148 Network Name: AKHNET Location: University of Vienna, Universitaetsstrasse 5/9, A-1010 Vienna, AUSTRIA Country Code: AT 1:513 EASInet / CERN 2:1800 ICM-Atlantic Network IP: 157.97 Network Name: NORTH Location: UUNORTH Inc., 3555 Don Mills Rd., Willowdale, Ontario, M2H 3N3, CANADA Country Code: CA 1:2493 FONOROLA-EAST Network IP: 157.246 Network Name: SPS-NET Location: Springfield Public Schools, 525 Mill Street, Springfield, OR 97477, USA Country Code: US 1:685 NorthWestNet Regional Network 2:73 NorthWestNet Regional Network 3:101 NorthWestNet Regional Network Network IP: 158.21 Network Name: MOBILNET1 Location: Mobil Exploration and Production Services, Inc., Technical Computer Center, 3000 Pegasus Park Drive, Dallas, TX 75247, USA Country Code: US 1:114 SESQUINET Regional Network 2:1700 SESQUINET Regional Network Network IP: 158.22 Network Name: MOBILNET2 Location: Mobil Exploration and Production Services, Inc., Technical Computer Center, 3000 Pegasus Park Drive, Dallas, TX 75247, USA Country Code: US 1:114 SESQUINET Regional Network 2:1700 SESQUINET Regional Network Network IP: 158.23 Network Name: MOBILNET3 Location: Mobil Exploration and Production Services, Inc., Technical Computer Center, 3000 Pegasus Park Drive, Dallas, TX 75247, USA Country Code: US 1:114 SESQUINET Regional Network 2:1700 SESQUINET Regional Network Network IP: 158.24 Network Name: MOBILNET4 Location: Mobil Exploration and Production Services, Inc., Technical Computer Center, 3000 Pegasus Park Drive, Dallas, TX 75247, USA Country Code: US 1:114 SESQUINET Regional Network 2:1700 SESQUINET Regional Network Network IP: 158.25 Network Name: MOBILNET5 Location: Mobil Exploration and Production Services, Inc., Technical Computer Center, 3000 Pegasus Park Drive, Dallas, TX 75247, USA Country Code: US 1:114 SESQUINET Regional Network 2:1700 SESQUINET Regional Network Network IP: 158.26 Network Name: MOBILNET6 Location: Mobil Exploration and Production Services, Inc., Technical Computer Center, 3000 Pegasus Park Drive, Dallas, TX 75247, USA Country Code: US 1:114 SESQUINET Regional Network 2:1700 SESQUINET Regional Network Network IP: 160.45 Network Name: FULAN Location: Freie Universitaet Berlin, Zentraleinrichtung fuer Datenverarbeitung, Fabeckstr. 32, D-W-1000 Berlin 33, GERMANY Country Code: DE 1:293 Energy Science Network (FIX-East) 2:291 Energy Science Network (FIX-West) Network IP: 164.58 Network Name: ONENET Location: Oklahoma State Regents for Higher Education, 500 Education Building, State Capitol Complex, Oklahoma City, OK 73105, USA Country Code: US 1:93 MIDnet Network IP: 164.62 Network Name: FTCNET Location: Federal Trade Commission, 6th & Pennsylvania Ave. NW, Washington, DC 20580, USA Country Code: US 1:174 NYSERNet Regional Network / PSI Network IP: 192.16.197 Network Name: CWI-VARIA Location: CWI, Centrum voor Wiskunde en Informatica, Kruislaan 413, NL-1098 SJ Amsterdam, NETHERLANDS Country Code: NL 1:701 Alternet 2:1800 ICM-Atlantic Network IP: 192.67.245 Network Name: JVNC-SLIP-J Location: JvNCnet, Global Enterprise Services, Inc., B6 Von Neumann Hall, Princeton, NJ 08544, USA Country Code: US 1:97 JvNCnet Regional Network Network IP: 192.67.246 Network Name: JVNC-SLIP-K Location: JvNCnet, Global Enterprise Services, Inc., B6 Von Neumann Hall, Princeton, NJ 08544, USA Country Code: US 1:97 JvNCnet Regional Network Network IP: 192.67.247 Network Name: JVNC-SLIP-L Location: JvNCnet, Global Enterprise Services, Inc., B6 Von Neumann Hall, Princeton, NJ 08544, USA Country Code: US 1:97 JvNCnet Regional Network Network IP: 192.83.232 Network Name: MSMACN Location: Morehouse School of Medicine, Academic Computer Network, 720 Westview Drive, SW, Atlanta, GA 30310, USA Country Code: US 1:279 SURANET Regional Network (Georgia Tech) 2:86 SURANET Regional Network (College Park) Network IP: 192.154.10 Network Name: DP7UP3 Location: Dr. Pepper/The Seven-Up Company, 8144 Walnut Hill Lane, Dallas, TX 75231, USA Country Code: US 1:701 Alternet 2:702 Alternet 3:279 SURANET Regional Network (Georgia Tech) Network IP: 192.154.68 Network Name: ACSYS-NET Location: EOP Group, An AMP Company, 3300 Gateway Centre Blvd., Morrisville, NC 27560, USA Country Code: US 1:81 CONCERT 2:1327 ANS Washington D.C. - DNSS 59 Network IP: 192.154.69 Network Name: ACSYS-NTX-NET Location: EOP Group, An AMP Company, 3300 Gateway Centre Blvd., Morrisville, NC 27560, USA Country Code: US 1:81 CONCERT 2:1327 ANS Washington D.C. - DNSS 59 Network IP: 192.154.70 Network Name: ACSYS-NTP-NET Location: EOP Group, An AMP Company, 3300 Gateway Centre Blvd., Morrisville, NC 27560, USA Country Code: US 1:81 CONCERT 2:1327 ANS Washington D.C. - DNSS 59 Network IP: 192.154.71 Network Name: ACSYS-SYS-NET Location: EOP Group, An AMP Company, 3300 Gateway Centre Blvd., Morrisville, NC 27560, USA Country Code: US 1:81 CONCERT 2:1327 ANS Washington D.C. - DNSS 59 Network IP: 192.154.75 Network Name: NETTECH-NET Location: NetTech Incorporated, 4040 Barrett Drive, Raleigh, NC 27609, USA Country Code: US 1:81 CONCERT 2:1327 ANS Washington D.C. - DNSS 59 Network IP: 192.154.76 Network Name: DATAWATCH-NET Location: Datawatch Corporation, 3700 Lyckan Parkway, Durham, NC 27707, USA Country Code: US 1:81 CONCERT 2:1327 ANS Washington D.C. - DNSS 59 Network IP: 192.156.135 Network Name: CALRES Location: California Research and Technology, 20943 Devonshire Street, Chatsworth, CA 91311, USA Country Code: US 1:68 Los Alamos Regional Network Network IP: 192.160.97 Network Name: WSCNET3 Location: Wayne State College, 200 E. 10th Street, Wayne, NE 68787, USA Country Code: US 1:93 MIDnet Network IP: 192.160.98 Network Name: WSCNET4 Location: Wayne State College, 200 E. 10th Street, Wayne, NE 68787, USA Country Code: US 1:93 MIDnet Network IP: 192.187.167 Network Name: NETCOM70 Location: Netcom On-line Communications Services, 4000 Moorpark Avenue - Suite 209, San Jose, CA 95117, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.190.10 Network Name: GDT1 Location: Geographic Data Technology, 13 Dartmouth College Highway, Lyme, NH 03768, USA Country Code: US 1:560 NEARnet Regional Network 2:281 NEARnet Regional Network 5:701 Alternet Network IP: 192.190.173 Network Name: BANKI-NET Location: Banki Donat Institute of Technology, Nepszinhaz u. 8, H-1081 Budapest, HUNGARY Country Code: HU 1:513 EASInet / CERN 2:1800 ICM-Atlantic Network IP: 192.204.7 Network Name: PDF Location: PDF Solutions, 2 Olympia Place, Pittsburgh, PA 15217, USA Country Code: US 1:1206 PSCNET Regional Network 2:204 PSCNET Regional Network Network IP: 192.207.22 Network Name: CCSU-NET3 Location: Corpus Christi State University, 6300 Ocean Drive, Corpus Christi, TX 78412, USA Country Code: US 1:280 SESQUINET Regional Network Network IP: 192.233.11 Network Name: SPCOT-SANDERS Location: Lockheed Sanders, Inc., 144 Daniel Webster Highway, Merrimack, NH 03054, USA Country Code: US 1:560 NEARnet Regional Network 2:281 NEARnet Regional Network 5:701 Alternet Network IP: 192.239.29 Network Name: GIT-SUB14 Location: Georgia Institute of Technology, Office of Computing Services, 258 4th Street, Rich Building, Atlanta, GA 30332, USA Country Code: US 1:279 SURANET Regional Network (Georgia Tech) 2:86 SURANET Regional Network (College Park) Network IP: 192.251.128 Network Name: MIDWESTERN Location: Midwestern State University, 3410 Taft Blvd., Witchita Falls, TX 76308-2099, USA Country Code: US 1:280 SESQUINET Regional Network 2:114 SESQUINET Regional Network Network IP: 193.5.56 Network Name: ARINET Location: AO-Forschungsinstitut, Clavadelerstrasse, CH-7270 Davos-Platz, SWITZERLAND Country Code: CH 1:559 EASInet / SWITCH 2:1800 ICM-Atlantic Network IP: 193.5.60 Network Name: PMOD Location: Phys.Meteo.Observatorium Davos, World Radiation Center, Dorfstrasse 33, CH-7260 Davos-Dorf, SWITZERLAND Country Code: CH 1:559 EASInet / SWITCH 2:1800 ICM-Atlantic Network IP: 193.74.250 Network Name: EUNET-BE Location: EUnet Dialup IP with NSF access, Dept. Computerwetenschappen, Celestijnenlaan 200A, B-3001 Heverlee, BELGIUM Country Code: BE 1:701 Alternet 2:1800 ICM-Atlantic Network IP: 193.141.32 Network Name: HQ-NEW1 Location: HQ - Interaktive Mediensysteme - Germany, Feldmannstrasse 87, W-6600 Saarbruecken, GERMANY Country Code: DE 1:1324 ANS New York City - DNSS 35 Network IP: 193.141.33 Network Name: HQ-NEW2 Location: HQ - Interaktive Mediensysteme - Germany, Feldmannstrasse 87, W-6600 Saarbruecken, GERMANY Country Code: DE 1:1324 ANS New York City - DNSS 35 Network IP: 193.141.34 Network Name: HQ-NEW3 Location: HQ - Interaktive Mediensysteme - Germany, Feldmannstrasse 87, W-6600 Saarbruecken, GERMANY Country Code: DE 1:1324 ANS New York City - DNSS 35 Network IP: 193.141.35 Network Name: HQ-NEW4 Location: HQ - Interaktive Mediensysteme - Germany, Feldmannstrasse 87, W-6600 Saarbruecken, GERMANY Country Code: DE 1:1324 ANS New York City - DNSS 35 Network IP: 193.141.40 Network Name: NEWXLINK0 Location: XLINK - Karlsruhe, Am Fasanengarten 5, W-7500 Karlsruhe 1, GERMANY Country Code: DE 1:1324 ANS New York City - DNSS 35 Network IP: 198.3.124 Network Name: SANTEC Location: Sub Aqua & Network Technologies, 51 Fulton Street #2, Boston, MA 02109, USA Country Code: US 1:701 Alternet 2:702 Alternet 3:279 SURANET Regional Network (Georgia Tech) Network IP: 198.22.1 Network Name: WYVERN Location: Wyvern Technologies, 1020 Raleigh Ave., Norfolk, VA 23507, USA Country Code: US 1:701 Alternet 2:702 Alternet 3:279 SURANET Regional Network (Georgia Tech) Network IP: 198.53.32 Network Name: NETBLK-FONOROLA32 Location: Fonorola, 250 Albert Street, Suite 205, Ottawa, Ontario K1P-6M1, CANADA Country Code: CA 1:2493 FONOROLA-EAST Network IP: 198.53.64 Network Name: NETBLK-FONOROLA64 Location: Fonorola, 250 Albert Street, Suite 205, Ottawa, Ontario K1P-6M1, CANADA Country Code: CA 1:2493 FONOROLA-EAST Network IP: 198.53.254 Network Name: NETBLK-FONOROLA254 Location: Fonorola, 250 Albert Street, Suite 205, Ottawa, Ontario K1P-6M1, CANADA Country Code: CA 1:2493 FONOROLA-EAST Network IP: 198.59.129 Network Name: NETBLK-WESTNET129 Location: Westnet, 3645 Marine Street, U. of Colorado, Boulder, CO 80309-0455, USA Country Code: US 1:209 Westnet Regional Network (Colorado Attachment) - ENSS 141 2:210 Westnet Regional Network (Utah Attachment) - ENSS 142 The following gateway peers have also been added: AS Number: 283 AS Notes: Gated Testing AS Country Code: US ANS: No BkBn: 690 NSS: 140.222.133 - ENSS133 Cornell, Ithaca, NY Gate: 132.236.200.22 - osprey.cit.cornell.edu 142 Surge III, Cornell, Ithaca, NY Gate: 132.236.200.25 - mitchell.cit.cornell.edu 150 Surge III, Cornell, Ithaca, NY Gate: 132.236.200.71 - blackbird.cit.cornell.edu 150 Surge III, Cornell, Ithaca, NY AS Number: 601 AS Notes: CA*net in Toronto AS Country Code: CA ANS: No BkBn: 690 NSS: 140.222.133 - ENSS133 Cornell, Ithaca, NY Gate: 192.35.82.20 - XPSP.ON.CANET.CA ENSS 133 -- Ithaca, NY AS Number: 603 AS Notes: CA*net in Quebec AS Country Code: CA ANS: No BkBn: 690 NSS: 140.222.137 - ENSS137 Princeton, NJ Gate: 192.122.193.3 - XPSP.QC.CANET.CA ENSS 137 -- Princeton, NJ ***************************************************************** The configuration reports which reflect today's update will be available for anonymous ftp on nis.nsf.net by 08:00 EST: configuration reports -- nis.nsf.net:nsfnet/announced.networks: ans_core.now as-as.now as-gw.now as-site.now as.now country.now gate-gw.now net-comp.now net-ter.now net-net.now netcount.now non-us.now nss-as.now nss-gw.now nss.now networks sorted by AS -- nis.nsf.net:nsfnet/announced.networks: nets.as_<AS number> NSS routing software configuration files -- nis.nsf.net:nsfnet/backbone.configuration: nss<NSS number>.t3p Please send all requests for configuration changes to nsfnet-admin(a)merit.edu using the NSFNET configuration forms. The forms are available on-line from the nis.nsf.net machine. Use ftp and the anonymous login to get on the machine. Do a "cd nsfnet/announced.networks" and get the files template.net, template.gate, and template.as. ******************************* --Steve Widmayer Merit/NSFNET skw(a)merit.edu --Riaz Taherzadeh-Yazdian NSFNET/ANSNET rty(a)ans.net

1 0

NSR postmortem
by John Labbe 18 Feb '93

18 Feb '93

On February 16 from 16:10-18:30 EST Sesquinet lost commercial power and went to UPS backup power. While AS 1700 experienced some instability for a short period the ENSS and it's other associated peering sessions remained up during this period. The following NSR was sent in error. >From network-status-reports-owner Tue Feb 16 19:05:51 1993 >To: nsr >Subject: 02/16/93 ENSS 139 Houston Unreachable 16:10 - 18:30 EST > >02/16/93 ENSS 139 Houston Unreachable 16:10 - 18:30 EST > due to loss of power at the local site. We apologize for the inaccurate report and we are reviewing our decision matrix for sending NSRs. John Labbe Manager ANS NOC

1 0

Revised CERT Advisory - Commodore Amiga UNIX finger Vulnerability
by CERT Advisory 18 Feb '93

18 Feb '93

=========================================================================== CA-93:04a CERT Advisory February 18, 1993 REVISION NOTICE: Commodore Amiga UNIX finger Vulnerability --------------------------------------------------------------------------- *** THIS IS A REVISED CERT ADVISORY *** *** IT CONTAINS UPDATED INFORMATION *** The CERT Coordination Center has received information concerning a vulnerability in the "finger" program of Commodore Business Machine's Amiga UNIX product. The vulnerability affects Commodore Amiga UNIX versions 1.1, 2.03, 2.1, 2.1p1, 2.1p2, and 2.1p2a. Commodore is aware of the vulnerability, and both a workaround and a patch are available. Affected sites should apply either the workaround or the patch, and directions are provided below. The Commodore contact e-mail address given in CERT Advisory CA-93:04 was incorrect. This revised advisory provides the correct e-mail address. If you have any further questions, contact David Miller of Commodore via e-mail at davidm(a)commodore.com. --------------------------------------------------------------------------- I. Description The "finger" command in Amiga UNIX contains a security vulnerability. II. Impact Non-privileged users can gain unauthorized access to files. III. Solution Commodore has suggested a workaround and a patch, as follows: A. Workaround As root, modify the permission of the existing /usr/bin/finger to prevent misuse. # /bin/chmod 0755 /usr/bin/finger B. Patch As root, install the "pubsrc" package from the distribution tape. In the file, "/usr/src/pub/cmd/finger/src/finger.c", add the line: setuid(getuid()); immediately before the line reading: display_finger(finger_list); (Optionally) save a copy of the existing /usr/bin/finger and modify its permission to prevent misuse. # /bin/mv /usr/bin/finger /usr/bin/finger.orig # /bin/chmod 0755 /usr/bin/finger.orig In the directory, "/usr/src/pub/cmd/finger", issue the command: # cd /usr/src/pub/cmd/finger # make install ------------------------------------------------------------------------------ The CERT Coordination Center wishes to thank Commodore Business Machines for their response to this problem. ------------------------------------------------------------------------------ If you believe that your system has been compromised, contact the CERT Coordination Center or your representative in FIRST (Forum of Incident Response and Security Teams). Internet E-mail: cert(a)cert.org Telephone: 412-268-7090 (24-hour hotline) CERT personnel answer 7:30 a.m.-6:00 p.m. EST(GMT-5)/EDT(GMT-4), on call for emergencies during other hours. CERT Coordination Center Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 Past advisories, information about FIRST representatives, and other information related to computer security are available for anonymous FTP from cert.org (192.88.209.5).

1 0

Additions to the NSFNET policy-based routing database
by Steven K. Widmayer 16 Feb '93

16 Feb '93

The following additions have been made to the NSFNET policy-based routing database and will be installed on the backbone by 08:00 EST: Total configured networks: 9277 IP address Net name Country Date Priority:AS ---------- -------- ------- ---- ----------- 137.195 HERIOT-WATT C:GB D:02/15/93 1:297 2:372 148.214 UGTO C:MX D:02/15/93 1:278 151.170 UK-MET-O C:GB D:02/15/93 1:297 2:372 192.6.7 HP-NETS8 C:US D:02/15/93 1:200 2:201 192.25.204 FTC2-HP C:US D:02/15/93 1:200 2:201 192.68.224 PT-IST C:PT D:02/15/93 1:297 2:372 192.84.13 PTUCNET C:PT D:02/15/93 1:297 2:372 192.84.15 PTLISNET C:PT D:02/15/93 1:297 2:372 192.104.41 DATRAC-NET C:CH D:02/15/93 1:701 2:1800 192.108.20 COVIA-TPNET2 C:US D:02/15/93 1:209 2:210 192.138.204 PTUCMATNET C:PT D:02/15/93 1:297 2:372 192.149.231 CENTRAL C:US D:02/15/93 1:93 192.171.137 NERC-NET10 C:GB D:02/15/93 1:297 2:372 192.171.138 NERC-NET11 C:GB D:02/15/93 1:297 2:372 192.171.148 NERC-NET21 C:GB D:02/15/93 1:297 2:372 192.171.149 NERC-NET22 C:GB D:02/15/93 1:297 2:372 192.171.150 NERC-NET23 C:GB D:02/15/93 1:297 2:372 192.171.197 NERC-NET70 C:GB D:02/15/93 1:297 2:372 192.199.111 NETBLK-RAY-111 C:US D:02/15/93 1:1740 192.239.29 GIT-SUB14 C:US D:02/15/93 1:279 2:86 193.2.64 UNI-LJ-RCU-NET C:SI D:02/15/93 1:297 2:372 193.2.68 UNI-LJ-FIZ-NET C:SI D:02/15/93 1:297 2:372 193.2.69 UNI-LJ-MF-NET C:SI D:02/15/93 1:297 2:372 193.2.126 IZUM-NET1 C:SI D:02/15/93 1:297 2:372 193.63.76 NISS-AC-UK C:GB D:02/15/93 1:297 2:372 193.63.77 ARM-OBS C:GB D:02/15/93 1:297 2:372 193.63.78 TEX-NET C:GB D:02/15/93 1:297 2:372 193.72.196 ERGON2 C:CH D:02/15/93 1:701 2:1800 193.96.250 BECOMM-LAN C:DE D:02/15/93 1:701 2:1800 198.17.176 STC-NET C:US D:02/15/93 1:93 198.49.22 STEPHENS-NET C:US D:02/15/93 1:93 198.49.126 ACUM-NET C:US D:02/15/93 1:209 2:210 198.49.127 CADIS-NET C:US D:02/15/93 1:209 2:210 198.49.144 CULVER-NET1 C:US D:02/15/93 1:93 198.49.145 CULVER-NET2 C:US D:02/15/93 1:93 198.51.184 JAY-NET C:US D:02/15/93 1:93 198.51.185 JEFFCO-NET C:US D:02/15/93 1:93 Network IP: 137.195 Network Name: HERIOT-WATT Location: Heriot-Watt University, Riccarton, Edinburgh EH14 4AS, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 148.214 Network Name: UGTO Location: Universidad de Guanajuato, Av. Prolongacion Tampico s/n, Col. Bella Vista, Salamanca Gto., C.P. 36730, MEXICO Country Code: MX 1:278 Mexican Networks at NCAR Network IP: 151.170 Network Name: UK-MET-O Location: Meteorological Office, London Road, Bracknell, Berkshire RG12 2SZ, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.6.7 Network Name: HP-NETS8 Location: Hewlett-Packard Company, 19420 Homestead Road, Cupertino, CA 95014, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.25.204 Network Name: FTC2-HP Location: Hewlett-Packard, 3404 East Harmony Road, M.S. 12, Ft. Collins, CO 80525, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.68.224 Network Name: PT-IST Location: I.S.T. - Instituto Superior Tecnico, CIIST, Av. Rovisco Pais, P-1096 Lisboa, PORTUGAL Country Code: PT 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.84.13 Network Name: PTUCNET Location: Universidade de Coimbra - CI, Rua do Arco da Traicao, P-3000 Coimbra, PORTUGAL Country Code: PT 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.84.15 Network Name: PTLISNET Location: Universidade de Coimbra - LIS, Quinta da Boavista, LT 1, 1, P-3000 Coimbra, PORTUGAL Country Code: PT 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.104.41 Network Name: DATRAC-NET Location: Datrac AG - Laupen, Datrac AG, Bahnweg 2, CH-3177 Laupen, SWITZERLAND Country Code: CH 1:701 Alternet 2:1800 ICM-Atlantic Network IP: 192.108.20 Network Name: COVIA-TPNET2 Location: COVIA Partnership, Applied Research, Dept. COVLR, 9700 West Higgins, Rosemont, IL 60018, USA Country Code: US 1:209 Westnet Regional Network (Colorado Attachment) - ENSS 141 2:210 Westnet Regional Network (Utah Attachment) - ENSS 142 Network IP: 192.138.204 Network Name: PTUCMATNET Location: Universidade de Coimbra - MAT, Largo de D. Dinis, P-3000 Coimbra, PORTUGAL Country Code: PT 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.149.231 Network Name: CENTRAL Location: Central College, Computer Center, Pella, IA 50219, USA Country Code: US 1:93 MIDnet Network IP: 192.171.137 Network Name: NERC-NET10 Location: British Antarctic Survey, High Cross, Madingley Road, Cambridge CB3 0ET, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.138 Network Name: NERC-NET11 Location: British Antarctic Survey, High Cross, Madingley Road, Cambridge CB3 0ET, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.148 Network Name: NERC-NET21 Location: British Geological Survey, Kingsley Dunham Centre, Knicker Hill, Keyworth, Nottingham NG12 5GG, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.149 Network Name: NERC-NET22 Location: British Geological Survey, Kingsley Dunham Centre, Knicker Hill, Keyworth, Nottingham NG12 5GG, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.150 Network Name: NERC-NET23 Location: British Geological Survey, Kingsley Dunham Centre, Knicker Hill, Keyworth, Nottingham NG12 5GG, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.197 Network Name: NERC-NET70 Location: British Geological Survey, Kingsley Dunham Centre, Knicker Hill, Keyworth, Nottingham NG12 5GG, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.199.111 Network Name: NETBLK-RAY-111 Location: CERFnet, 3550 General Atomics Court, San Diego, CA 92121, USA Country Code: US 1:1740 CERFnet Network IP: 192.239.29 Network Name: GIT-SUB14 Location: Georgia Institute of Technology, Office of Computing Services, 258 4th Street, Rich Building, Atlanta, GA 30332, USA Country Code: US 1:279 SURANET Regional Network (Georgia Tech) 2:86 SURANET Regional Network (College Park) Network IP: 193.2.64 Network Name: UNI-LJ-RCU-NET Location: University of Ljubljana, University Computing Centre, Kardeljeva pl. 17, 61000 Ljubljana, SLOVENIA Country Code: SI 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.2.68 Network Name: UNI-LJ-FIZ-NET Location: University of Ljubljana, Physics Department, Jadranska 19, 61000 Ljubljana, SLOVENIA Country Code: SI 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.2.69 Network Name: UNI-LJ-MF-NET Location: University of Ljubljana, Medical Faculty, Vrazov trg 2, 61105 Ljubljana, SLOVENIA Country Code: SI 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.2.126 Network Name: IZUM-NET1 Location: Univerzitetni Institut Informacijskih Znanost, Presernova 17, 62000 Maribor, SLOVENIA Country Code: SI 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.63.76 Network Name: NISS-AC-UK Location: National Information on Software and Services, CHEST and NISS Centre, Computing Services, University of Bath, Claverton Down, BAth BA2 7AY, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.63.77 Network Name: ARM-OBS Location: Armagh Observatory, College Hill, Armagh BT61 9DG, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.63.78 Network Name: TEX-NET Location: UK TeX Archive, Information Systems, Aston University, Aston Triangle, Birmingham, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.72.196 Network Name: ERGON2 Location: Ergon Informatik AG - Zuerich, Ergon Informatik AG, Herrn Theodor Graf, Baechtoldstrasse 4, 8044 Zuerich, SWITZERLAND Country Code: CH 1:701 Alternet 2:1800 ICM-Atlantic Network IP: 193.96.250 Network Name: BECOMM-LAN Location: CAP debis BeCom Telecom LAN, CAP debis BeCom GmbH, Oehleckerring 40, D-W-2000 Hamburg 62, GERMANY Country Code: DE 1:701 Alternet 2:1800 ICM-Atlantic Network IP: 198.17.176 Network Name: STC-NET Location: St. Charles County Community College, P.O. Box 76925, 4601 Mid Rivers Mall Drive, St. Peters, MO 63376-0975, USA Country Code: US 1:93 MIDnet Network IP: 198.49.22 Network Name: STEPHENS-NET Location: Stephens College, 1200 E. Broadway, Columbia, MO 65215, USA Country Code: US 1:93 MIDnet Network IP: 198.49.126 Network Name: ACUM-NET Location: ACU-Megsur, 3506 Stratton Drive, Ft. Collins, CO 80525-2722, USA Country Code: US 1:209 Westnet Regional Network (Colorado Attachment) - ENSS 141 2:210 Westnet Regional Network (Utah Attachment) - ENSS 142 Network IP: 198.49.127 Network Name: CADIS-NET Location: Cadis, Inc., 1050 Walnut Street #301, Boulder, CO 80302, USA Country Code: US 1:209 Westnet Regional Network (Colorado Attachment) - ENSS 141 2:210 Westnet Regional Network (Utah Attachment) - ENSS 142 Network IP: 198.49.144 Network Name: CULVER-NET1 Location: Culver-Stockton College, 1 College Hill, Canton, MO 63435, USA Country Code: US 1:93 MIDnet Network IP: 198.49.145 Network Name: CULVER-NET2 Location: Culver-Stockton College, 1 College Hill, Canton, MO 63435, USA Country Code: US 1:93 MIDnet Network IP: 198.51.184 Network Name: JAY-NET Location: Westminster College, 501 West Minster Avenue, Fulton, MO 65251-1299, USA Country Code: US 1:93 MIDnet Network IP: 198.51.185 Network Name: JEFFCO-NET Location: Jefferson College, 1000 Viking Drive, Hillsboro, MO 63050, USA Country Code: US 1:93 MIDnet The following gateway peers have also been added: AS Number: 1664 AS Notes: SHARE conference - San Francisco AS Country Code: US ANS: Yes BkBn: 690 NSS: 140.222.201 - SHARE conference - San Francisco San Francisco, CA Gate: 192.188.66.101 - gate name not available ANS / SHARE conference AS Number: 1747 AS Notes: IBM Watson, Yorktown Heights, NY AS Country Code: US ANS: Yes BkBn: 690 NSS: 140.222.164 - ENSS 164 - IBM Watson Yorktown Heights, NY Gate: 129.34.139.1 - chiba.watson.ibm.com IBM Watson, Yorktown Heights, NY ***************************************************************** The configuration reports which reflect today's update will be available for anonymous ftp on nis.nsf.net by 08:00 EST: configuration reports -- nis.nsf.net:nsfnet/announced.networks: ans_core.now as-as.now as-gw.now as-site.now as.now country.now gate-gw.now net-comp.now net-ter.now net-net.now netcount.now non-us.now nss-as.now nss-gw.now nss.now networks sorted by AS -- nis.nsf.net:nsfnet/announced.networks: nets.as_<AS number> NSS routing software configuration files -- nis.nsf.net:nsfnet/backbone.configuration: nss<NSS number>.t3p Please send all requests for configuration changes to nsfnet-admin(a)merit.edu using the NSFNET configuration forms. The forms are available on-line from the nis.nsf.net machine. Use ftp and the anonymous login to get on the machine. Do a "cd nsfnet/announced.networks" and get the files template.net, template.gate, and template.as. ******************************* --Steve Widmayer Merit/NSFNET skw(a)merit.edu --Riaz Taherzadeh-Yazdian NSFNET/ANSNET rty(a)ans.net

1 0

January NSFNET Usage by Service
by Susan Horvath 14 Feb '93

14 Feb '93

NSFNET Traffic Distribution Highlights January 1993 Packet Total: 27,459,168,150 Byte Total: 5,159,543,112,250 Service Name Port Rank Packet Count % Pkts Rank Byte Count % Byts ============ ==== ==== ============ ====== ==== ============= ====== ftp-data 20 1 6794442500 24.744 1 2412315213850 46.754 telnet 23 2 4160481250 15.152 4 278336875000 5.395 nntp 119 3 2440549750 8.888 2 509546469450 9.876 smtp 25 4 1827855150 6.657 3 301358808150 5.841 domain 53 5 1560403900 5.683 5 147486292300 2.859 ftp 21 6 555947550 2.025 9 43257755200 0.838 irc 6667 7 533078650 1.941 8 46335270350 0.898 icmp -1 8 504434200 1.837 11 42369688900 0.821 vmnet 175 9 372480050 1.356 6 131039759300 2.540 X0 6000 10 224638000 0.818 12 41125146500 0.797 login/who 513 11 191196750 0.696 15 18349453950 0.356 gopher 70 12 187225100 0.682 10 43238448800 0.838 (unknown) 1023 13 168644250 0.614 16 18068524050 0.350 snmp 161 14 145360100 0.529 17 15977569750 0.310 finger 79 15 133303800 0.485 19 12239523950 0.237 ntp 123 16 131845300 0.480 21 10045369250 0.195 (unknown) 900 17 93107000 0.339 7 48242658350 0.935 (unknown) 1022 18 89549550 0.326 18 13488986450 0.261 talk 517 19 87082250 0.317 24 8874658700 0.172 cmd/syslog 514 20 70356000 0.256 13 26907320900 0.522 (unknown) 1021 21 63454450 0.231 20 12096609050 0.234 efs/router 520 22 62584800 0.228 14 18473418700 0.358 uucp 540 23 51636800 0.188 22 9911015350 0.192 (unknown) 1020 24 44420550 0.162 23 8890700700 0.172 ntalk 518 25 33812400 0.123 33 3699164750 0.072 (unknown) 700 26 22186950 0.081 27 5574766900 0.108 (unknown) 1019 27 21756550 0.079 28 4366954750 0.085 bgp 179 28 19593200 0.071 47 1302786650 0.025 (unknown) 76 29 18318800 0.067 29 4270222200 0.083 discard 9 30 17687650 0.064 62 710540000 0.014 z39.50 210 34 12502550 0.046 36 3522869800 0.068 shilp/sun-nfs 2049 63 3459700 0.013 61 723197000 0.014 iso-ip -80 80 1792600 0.007 56 880551550 0.017 X1 6001 102 932950 0.003 116 122755900 0.002 www 80 127 511450 0.002 117 122440450 0.002 X2 6002 519 53050 0.000 537 6150400 0.000 X3 6003 712 14400 0.000 993 1349600 0.000 prospero 191 729 13000 0.000 453 9253050 0.000 Ordered by decreasing packet counts, this table includes the top 30 services and highlights other selected services. Information for this report is available only for TCP/UDP port numbers 0-1023, 2049, 6000-6003, 6667, and all Internet Protocols (differentiated from TCP/UDP ports by negating the protocol number). More detailed information is available for Anonymous FTP from NIC.MERIT.EDU (the Merit NIC Services machine) in the file "nsf-9301.ports" on the nsfnet/statistics/1993 directory.

1 0

CERT Advisory - Commodore Amiga UNIX finger Vulnerability
by CERT Advisory 12 Feb '93

12 Feb '93

=========================================================================== CA-93:04 CERT Advisory February 12, 1993 Commodore Amiga UNIX finger Vulnerability --------------------------------------------------------------------------- The CERT Coordination Center has received information concerning a vulnerability in the "finger" program of Commodore Business Machine's Amiga UNIX product. The vulnerability affects Commodore Amiga UNIX versions 1.1, 2.03, 2.1, 2.1p1, 2.1p2, and 2.1p2a. Commodore is aware of the vulnerability, and both a workaround and a patch are available. Affected sites should apply either the workaround or the patch, and directions are provided below. If you have any further questions, contact Commodore's David Miller via e-mail. David's e-mail address is davidm(a)cdmvax.commodore.com. --------------------------------------------------------------------------- I. Description The "finger" command in Amiga UNIX contains a security vulnerability. II. Impact Non-privileged users can gain unauthorized access to files. III. Solution Commodore has suggested a workaround and a patch, as follows: A. Workaround As root, modify the permission of the existing /usr/bin/finger to prevent misuse. # /bin/chmod 0755 /usr/bin/finger B. Patch As root, install the "pubsrc" package from the distribution tape. In the file, "/usr/src/pub/cmd/finger/src/finger.c", add the line: setuid(getuid()); immediately before the line reading: display_finger(finger_list); (Optionally) save a copy of the existing /usr/bin/finger and modify its permission to prevent misuse. # /bin/mv /usr/bin/finger /usr/bin/finger.orig # /bin/chmod 0755 /usr/bin/finger.orig In the directory, "/usr/src/pub/cmd/finger", issue the command: # cd /usr/src/pub/cmd/finger # make install ------------------------------------------------------------------------------ The CERT Coordination Center wishes to thank Commodore Business Machines for their response to this problem. ------------------------------------------------------------------------------ If you believe that your system has been compromised, contact the CERT Coordination Center or your representative in FIRST (Forum of Incident Response and Security Teams). Internet E-mail: cert(a)cert.org Telephone: 412-268-7090 (24-hour hotline) CERT personnel answer 7:30 a.m.-6:00 p.m. EST(GMT-5)/EDT(GMT-4), on call for emergencies during other hours. CERT Coordination Center Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 Past advisories, information about FIRST representatives, and other information related to computer security are available for anonymous FTP from cert.org (192.88.209.5).

1 0