************************************************************************** Security Bulletin 9611 DISA Defense Communications System May 1, 1996 Published by: DISN Security Coordination Center (SCC@NIC.DDN.MIL) 1-(800) 365-3642 DEFENSE INFORMATION SYSTEM NETWORK SECURITY BULLETIN The DISN SECURITY BULLETIN is distributed by the DISN SCC (Security Coordination Center) under DISA contract as a means of communicating information on network and host security exposures, fixes, and concerns to security and management personnel at DISN facilities. Back issues may be obtained via FTP (or Kermit) from NIC.DDN.MIL [192.112.36.5] using login="anonymous" and password="guest". The bulletin pathname is scc/sec-yynn (where "yy" is the year the bulletin is issued and "nn" is a bulletin number, e.g. scc/sec-9544.txt). These are also available at our WWW site, http://nic.ddn.mil. ************************************************************************** + - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + ! ! ! The following important advisory was issued by the Automated ! ! Systems Security Incident Support Team (ASSIST) and is being ! ! relayed unedited via the Defense Information Systems Agency's ! ! Security Coordination Center distribution system as a means ! ! of providing DISN subscribers with useful security information. ! ! ! + - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + -----BEGIN PGP SIGNED MESSAGE----- <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> Automated Systems Security Incident Support Team _____ ___ ___ _____ ___ _____ | / /\ / \ / \ | / \ | | / Integritas / \ \___ \___ | \___ | | < et /____\ \ \ | \ | | \ Celeritas / \ \___/ \___/ __|__ \___/ | |_____\ <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> Bulletin 96-09 Release date: April 30, 1996 8:00 PM EDT (GMT -4) Subject: ASSIST Information Resources. To facilitate the timely distribution of security-relevant information to DoD sites worldwide, ASSIST provides: 1. An electronic bulletin board system (BBS) and 2. An anonymous File Transfer Protocol (FTP) system for use by DoD-affiliated personnel. The new address for the ASSIST FTP site is ftp.assist.mil (199.211.123.12). This ASSIST bulletin provides information about connecting to the ASSIST BBS and FTP systems. These services are available to all DoD and DoD interested users. Please call the ASSIST Response Center (ARC) at 1-800-357-4231, when encountering any difficulty accessing the BBS or FTP server and the security analysts on duty will work with you to resolve the problem. The ASSIST BBS is a dial-up system that can be reached via modem at 703-607-4710, DSN 327. The BBS is an open system, and users will be prompted to set up an account during the initial call to the system. The vast majority of the files are available for unrestricted viewing and downloading by any user of the BBS. The IBM Antivirus (IBMAV) file area and the Norman anti-virus file area are restricted to access by users who have been verified as being DoD affiliated personnel. The verification process is required to fulfill terms of the licensing agreement with IBM and Norman for use of the IBMAV and Norman AV software. ASSIST verifies DoD affiliation by performing a call back to a DSN phone number provided by the person making the request, receiving an e-mail from a .mil address, or through some other arrangement. Once verified, access is granted to the IBMAV file area by an ASSIST BBS system administrator. Users who have questions or problems while on the BBS should go to the "Message Menu" and leave a message for "sysop". To login to the ASSIST BBS you will need: * Personal Computer (PC). * Modem (baud rates up to 28.8 are supported). * Communications software such as Procomm, Procomm+, Smartcom II or III, Crosstalk, etc. * Communication software settings should be: - Data bits: 8 - Stop bits: 1 - Parity: None - Duplex: Full - Terminal emulation: ANSI, VT series or IBM PC are the most common. * File download/upload protocols supported include xmodem, zmodem, ymodem, and ASCII. After you connect to the BBS the first time, the software will prompt you for the necessary input to set up an account. The following is a list of the BBS file areas and a description of content. A detailed listing of file names and descriptions can be viewed by selecting "F" while in the "Main Menu" to switch to the "File Menu", then selecting "L" to list files. File area 1 - ASSIST Bulletins 1991. File area 2 - ASSIST Bulletins 1992. File area 3 - ASSIST Bulletins 1993. File area 4 - ASSIST Bulletins 1994. File area 5 - ASSIST Bulletins 1995. File area 6 - ASSIST Bulletins 1996. File area 7 through 9 - Reserved for future ASSIST Bulletins. File area 10 - DOS Security Tools. File area 11 - UNIX Security Tools. File area 12 - Network Security Tools. File area 13 - Miscellaneous Security Tools. File area 14 - General Security Information. File area 15 - DISSPatch Newsletters. File area 16 - Security Publications, Policies, Regulations, Standards. File area 17 - CHIPS - Navy Computer Security Newsletter. File area 18 - The National Computer Security Center Rainbow Series. File area 19 - IBM Anti-Virus (area restricted to DoD only) File area 20 - INFOSEC Related Training and Conferences. File area 21 - NIST Computer Systems Lab (CSL) bulletins. File area 22 - For File uploads to ASSIST, accessible by BBS admin personnel only. All files are reviewed by ASSIST before being made available to BBS users. File area 23 - Norman anti-virus software. (area restricted to DoD only) File area 24 - Reserved for future ASSIST data. File area 25 - Virus-L 1995 Issues ************************************************************************ ASSIST has an anonymous FTP system that is available to every DoD system registered with the Defense Data Network (DDN) Network Information Center (NIC), or local Domain Name Server (DNS). The FTP file system is identical to that of the BBS with a few minor exceptions. Messages cannot be left for ASSIST using FTP, but messages can be sent via Milnet e-mail to assist@assist.mil. Milnet users can access the system by FTPing to Milnet address ftp.assist.mil (IP 199.211.123.12), and entering anonymous as the user ID and their e-mail address as the password. If the user sees the message "421 Connection refused by remote host", ftp.assist.mil did not resolve the incoming address as a .mil. If the user sees the message "Connection timed out", ftp.assist.mil could not determine whether or not the incoming address was a .mil in the allotted time. ftp.assist.mil will first attempt to resolve the incoming FTP address with the NIC, and failing there will then try DNS. If a search has to be performed on DNS, slow networks or failure to immediately locate the address can result in a timeout of the connection before the address is resolved. The best way to avoid FTP connection problems is to register DoD systems with the NIC. For NIC registration information, call 800-365-DNIC, 703-802-4535, e-mail to nic@nic.ddn.mil, or contact the DDN Project Management Office for your DoD element. For those who are unable to register systems in a timely manner, access to the FTP server can be granted if the IP (numeric) address of the system attempting to connect is provided to ASSIST. To access the ASSIST anonymous FTP system: * ftp to ftp.assist.mil from a NIC or DNS-registered system with Milnet connectivity. * A successful connection will display the following on your terminal: Connected to ftp.assist.mil. 220- 220-USE OF THIS OR ANY OTHER DEPT. OF DEFENSE INTEREST COMPUTER SYSTEM 220-(DODICS) CONSTITUTES AN EXPRESS CONSENT TO MONITORING AT ALL TIMES. 220-THIS DODICS AND ALL RELATED EQUIPMENT ARE TO BE USED FOR THE 220-COMMUNICATION, TRANSMISSION, PROCESSING, AND STORAGE OF OFFICIAL U.S. 220-GOVERNMENT OR OTHER AUTHORIZED INFORMATION ONLY. ALL DODICS ARE 220-SUBJECT TO MONITORING AT ALL TIMES. IF MONITORING OF ANY DODICS 220-REVEALS POSSIBLE VIOLATION OF CRIMINAL STATUTES, ALL RELEVANT 220-INFORMATION MAY BE PROVIDED TO LAW ENFORCEMENT OFFICIALS. 220- 220-This server is restricted to DNS registered *.MIL sites. 220- 220-If you do experience service problems, contact: 220-ASSIST at 1-800-357-4231 or ASSIST@assist.mil 220- 220 info FTP server (Version wu-2.4(2) Tue Sep 13 14:47:23 EDT 1994) ready. Name (ftp.assist.mil:): * Then type: anonymous * System will then display: 331 Guest login ok, send your complete e-mail address as password. Password: * Then type: The anonymous FTP resource is a Unix system. Type: ls -l to list the files in a directory, and cd to change from the current directory to another directory called directory-name. To download a file, type: get to download a file identified as file-name. The default file type is ASCII. If you are downloading a binary file (i.e. an executable or encrypted), change to binary mode first by typing: binary To change back to ASCII, type: ascii After a successful login, a directory listing (ls -l) will show the following: - - -rw-rw-r-- 1 root 1251 Mar 25 01:13 .login.msg - - -rw-rw-r-- 1 root 836 Sep 28 1994 assist.html - - -rw-r--r-- 1 root 803 Aug 6 1995 assist.pgp d--x--s--x 2 root 512 Dec 17 1993 bin drwxr-sr-x 2 root 512 Nov 30 1993 dev d--x--s--x 2 root 512 Dec 17 1993 etc drwxrwx-wx 5 root 1024 Apr 7 03:04 incoming drwxr-s--x 4 root 512 Apr 1 09:31 outgoing drwxrwsr-x 9 root 512 Apr 8 04:07 pub d--x--s--x 3 root 512 Nov 30 1993 usr drwxr-sr-x 2 root 512 Sep 28 1994 www Next, change directory to pub (cd pub) where a directory listing (ls -l) will show the following. NOTE: Each directory has a .message file that contains file names and descriptions for that directory. - - -rw-r--r-- 1 root 635 Apr 29 13:49 .message drwxr-sr-x 7 root 512 Apr 8 04:34 bulletins.newsletters drwxr-sr-x 6 root 512 Apr 8 02:49 dod.anti.virus drwxr-sr-x 3 root 1536 Apr 8 03:52 general.info drwxr-sr-x 12 root 2048 Apr 18 08:38 pubs.policy.regs drwxr-sr-x 9 root 512 Apr 29 13:46 toolbox drwxr-sr-x 6 root 512 Apr 8 04:10 tools drwxr-sr-x 2 root 512 Apr 8 04:03 training.conferences The contents of the directories listed above are as follows: Directory /pub/bulletins.newsletters/assist.bulletins/assist91 ASSIST Bulletins issued in 1991. Directory /pub/bulletins.newsletters/assist.bulletins/assist92 ASSIST Bulletins issued in 1992. Directory /pub/bulletins.newsletters/assist.bulletins/assist93 ASSIST Bulletins issued in 1993. Directory /pub/bulletins.newsletters/assist.bulletins/assist94 ASSIST Bulletins issued in 1994. Directory /pub/bulletins.newsletters/assist.bulletins/assist95 ASSIST Bulletins issued in 1995. Directory /pub/bulletins.newsletters/assist.bulletins/assist96 ASSIST Bulletins issued in 1996. Directory /pub/bulletins.newsletters/chips/ CHIPS Navy computer security newletters. Directory /pub/bulletins.newsletters/csl NIST Computer Systems Labs (CSL) Bulletins. Directory /pub/bulletins.newsletters/disspatch/ DISSPatch newsletters. Directory /pub/dod.anti.virus/ibmav/ IBM anti-virus software. Directory /pub/dod.anti.virus/norman/ Norman anti-virus software. Directory /pub/bulletins.newsletters/mls/ Information from the Center for Information Systems Security (CISS) Multi-Level Security Directorate. Directory /pub/general.info/ Information files related to security on various hardware/software platforms, networks, and other topics. Directory /pub/pubs.policy.regs/ Security related publications, regulations, policies, standards, and guidelines. Directory /pub/pubs.policy.regs/rainbow.series/ The National Computer Security Center Rainbow Series. Directory /pub/toolbox/ The Toolbox includes security products like DES, Password Generator, Perl, SPI, Swatch, and TCP/IP Wrappers. Directory /pub/tools/ Security tools for various hardware/software platforms. Included are subdirectories for Digital Encrytion Standard (DES) software, The Security Profile Inspector (SPI) for UNIX (in encrypted form, DES key available from ASSIST), and the Security Products Database Read Only Catalog (SPD/ROC). Directory /pub/training.conferences/ Information from training conferences Security tools for various hardware/software platforms. Included are subdirectories for Digital Encrytion Standard (DES) software, The Security Profile Inspector (SPI) for UNIX (in encrypted form, DES key available from ASSIST), and the Security Products Database Read Only Catalog (SPD/ROC). <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> ASSIST is an element of the Defense Information Systems Agency (DISA), Countermeasures, which provides service to the entire DoD community. Constituents of the DoD with questions about ASSIST or computer security issues, can contact ASSIST using one of the methods listed below. Non-DoD organizations/institutions, contact the Forum of Incident Response and Security Teams (FIRST) representative. To obtain a list of FIRST member organizations and their constituencies send an email to docserver@first.org with an empty "subject" line and a message body containing the line "send first-contacts". ASSIST Information Resources: To be included in the distribution list for the ASSIST bulletins, send your Milnet (Internet) e-mail address to assist-request@assist.mil. Back issues of ASSIST bulletins, and other security related information, are available from the ASSIST BBS at 703-607-4710, 327-4710, and through anonymous FTP from ftp.assist.mil (IP address 199.211.123.12). Note: ftp.assist.mil will only accept anonymous FTP connections from Milnet addresses that are registered with the NIC or DNS. If your system is not registered, you must provide your MILNET IP address to ASSIST before access can be provided. ASSIST Contact Information: PHONE: 800-357-4231 (or 703-607-4700 DSN 327), duty hours are 24 hours a day, 7 days a week, 365 days a year. ELECTRONIC MAIL: Send to assist@assist.mil. ASSIST BBS: Leave a message for the "sysop". ASSIST uses Pretty Good Privacy (PGP) as the digital signature mechanism for bulletins. PGP incorporates the RSAREF(tm) Cryptographic Toolkit under license from RSA Data Security, Inc. A copy of that license is available via anonymous FTP from net-dist.mit.edu (IP 18.72.0.3) in the file /pub/PGP/rsalicen.txt. In accordance with the terms of that license, PGP may be used for non-commercial purposes only. Instructions for downloading the PGP software can also be obtained from net-dist.mit.edu in the pub/PGP/README file. PGP and RSAREF may be subject to the export control laws of the United States of America as implemented by the United States Department of State Office of Defense Trade Controls. The PGP signature information will be attached to the end of ASSIST bulletins. Reference herein to any specific commercial product, process, or service by trade name, trademark manufacturer, or otherwise, does not constitute or imply its endorsement, recommendation, or favoring by ASSIST. The views and opinions of authors expressed herein shall not be used for advertising or product endorsement purposes. - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6 mQCNAi4uZ40AAAEEAM1uraimCNeh5PtzX7KoGxC2u8uMTdl8V5sujk3MHbWvCuOM W0FqDy5s9iwfQLZWzJ7cbM6L0mNOj8eJGoz7TqGKZDDRFlKAwg0x8joleZLC2gXw FVdF/g6Mdv7ok7heoa+Y//YMeADnsSrmzqLCnhFbKYffww3EbdH6sbnW3Io9AAUR tB9BU1NJU1QgVGVhbSA8YXNzaXN0QGFzc2lzdC5taWw+iQCVAwUQMJVF1JtBJ/Qs yeedAQFnqgQAp1rw7ONT41Mr3gHGs2aVpEwgOH6SeJ9sHZxUp4dJu+ogRMFrqdC+ +NBfzitzj9m1udFVDHpwsGawbv6wg43DDAKaTgIETCHYXa/OM5/9FCS3xJwC99Gb V1iOm8S/Q9FcJruKID9DG2WUJp2yPj+CjTuBQeLjGkqGjuSOR1TNXQiJAJUDBRAw lUPuYKf6jFkmJQkBAWg5A/9ykgo2ULWUsSzZjRkO9yPZUPAlpfH7ReaHwkapK69F fBzqwwQ8Gig1mL+qgmOHS8Zv+OAT491sWWsECN+dfpopFdsgS4Sec19ZjcMyhL1c BVIS9Cmbjetb6Kvfc39AMr0MRCrUlOkUd4qScjHysHFYRAwCl3STRjprNnUPKQbn f4kAlQMFEDB482bk8movIjSrbQEB/VgD/iap/CAb1jq8wMA3QleU8d6/QUqoPzgp jRhP0wP7K2GLVUV0d5sP4EptmzejqViZvlzt6ufnI1bML0Yt2U5loAeblnh714RX JcOmyAah6niiJSKuhCsYUzW6f3EBzXBn5tcu3GP35h+1VQunCQCMICCfnZ0r8Wcv EdwE9LxPYdueiQCVAwUQMHOjMwJPhGsUbeKNAQGOagQAgT5p6CwrIPpi+12yJ170 ekc3MPp8z0aNbvdCQWXTK6qtq1LmS65VeH0RE5xRponsgbWp+5JBvD22v0eGuSg7 7bnHT1HPXazPERAp8sw1zTERs7drMQE+JhHYylh3orKzHNf5EjFx10vwEXdfvGSc sP3Vpcx2xu0lUYHp5oHtPFiJAJUDBRAwar4DFKHh5Qavqe0BAeQqA/4xd0tdq9yF eUYrd1+ZriayzfSjCcIUlCDH1i7vXw1kiHkg2YpOoZLD9k+zNkbOyBs/r570fGHu A23SvUcUfaBUijT1jf9YGU5MQMdpx3p5qqI4kJ0GWUNySZNtaFy0qWNH8Z8NsNp3 FWllVeisye0qe96aoizW0dAyUymlM6YYn4kAlQMFEDBqqvga2zTcAviMgQEBN8wE AIu7O/Of4c1OvMc5tti4+gcyCVw41+fLjxQFB5EtkoW8Js6XhCsv3GcmzgCZw3g8 Sux7wxGe+lspZNV9rvv+JkDBWkA9O5HyOdmdv5JZM1UH41NettZM9Yw7kUtO7lAT aOb4ybHlqrBwJ8/+Lig7r7PwTL847JyGa3g229pGG/uEiQCVAwUQMGpTK+glSuMP TJd1AQE8KQP8Cu+FYuagNoBRllMIQryT9+0ngLRxJJTcTgIbLX4OPwa27JuXCukG kUIXRWFCqkRqkM/7ImZXeuUL4PmAX07f9ygGH7BUyqefhIWkxWFDaGHJVlg3l/pS Wh7NnC+nU6DUJNSzfwYStCABNptOcMiYaT1fY0+DkWpIgJVRTptquOWJAJUCBRAw aHX+IlGW2WZtAFEBATkXA/40QTxVP/x3aJDgC11cvFhwT7M+qJvhGSTRJOtrFz8i soZzihMeaQ8zLiu73dDlFz2E4f0+ettxsDcgFJADNmZ5H7WkPlf9gBUBne4KP2Y6 yIjOCMwd6T7HGm/ErF88DIJ2wn8irhzVRnBBWhnmQfSzr5a7mkjlA6GzAlFucGp3 eokAlQMFEDBpzIC58yc3bMt0GQEBgd4EAI0mE/5wXSWuBNApkALLjPAchBdeC4Kl YF4hQkfY/4YddeIasgTmINKOc5gJWgTHxPI2xKxjTAQhIZlOxuDyXWnBuK+x2hr4 iCh5unEIH+qaqdipGwWjFq0IZEmOOJaBRxlVt2hrmY6nRMpekitFLw8dhWHgI968 WVhJpWfBg+MhiQCVAwUQMGnMcmJl+kgHVnRVAQF+nQP/XK4xmIx1SmjoN9D+vNRY PSiKz8KEzh1Y2/5QTYA7iES8QXC4i/8HOWK7lyoL6FmWGxKYpU8isQ+DJpk0A4N0 U04JexpyFa0EeM/wsfp0YvAWesSVhV5UkDQU6hSC0U8rS1j/qtnSLZ4wXpapPSBh 82daDlxAQCVMzDoQYQZkMi+JAJUDBRAwacftBCZ9eY4KSdEBAbKGA/0VHArALL6v d0a0x7sn4o60Bk2fFzuaCBNTNzb11OOtuu47KMOZLwrl2jv+32ysIVEOXx+puhXP nQAgRrH0LGKV5FOY3B98AHuV+woOmfVjM2T3xB4Bs52Dz+HIIIhaWzzy3955tlp/ 6UyvZnD0QFLS/bre/Pog1Lgl0pxonmILhYkAlQIFEDBpJpXAx/wW8A8EIQEBPVoD /jwgG+7ZrWrb8/dqe6IZhSk8rq0JIHhSA2Hz1T7PhRvyDiquBJ3ulTeaX3BvuWqF bMuLJ4CTqXw9dexDehEnhGlxYycSXVzy8a34pLnmldii8oNvI1bLWMgd4HdM/PPZ GOgHmSIGrXMChkbddt9AoszDI0Whlbe9+wn6AeZVrJVaiQCVAgUQMGkkL2yh0IcG ee2RAQHrTgQAvBRce0S9yBvI/ufC/1jhE3LuUoA3YDdA8+UQ+UekaslZzOEgPs4K Za/nM9Y2vaRYscyzyIg8FGTzCdJQ2be9HZjSkB2xQuakeq88tlV32/cLcQSC8Zrw xsnPWujbIcWYg7B0hv8cCovef/w4kC9GyhjhIzPIsQ/Cr7/TYzheK12JAJUDBRAw Z/38o2xF3nu86kkBARanA/0XO4HBo6pT2xNCdQ7AW9UrvmTCiYUb0XVY7qCnkaPp Sn1KjsK2nGueDMGUBzvx9zWZ0xHAS+BSNkoM61gb9455KcbDwRqw6+47O/WuX1w9 fh7egjTY0kqN6YsP/vtirOuP+Krh19w/s6cDxbEBNbJIiZofRDFRRsZcZ8E2mLCP UIkAlQMFEDBn/EY7f8e8znZrHwEBxQwD/jP+CiwO3Nk45M5Ei++TZzdp7ak82hum XxVXplV2G4w8DN86pfl3IV/XvU67FQXg4NKJr+wm3JknDtlKZTE5g+aKkOYK6Fqt w3FjTd6PTDz11YRruCsdvBeYwMcHPe5XzIhgkwkMXX2Mp99q9LGKfV3087do2LNr V/2S/atn6IuqiQCVAwUQMGW6OliXq3zaXLJBAQFLwgP/bQ1C/Ph54RlRqw9rovJo SXp5wvQAfVqqnkL5nIIIK2uGputcmhMP8RqYKuRv4xaezkCDTeIE/P0327Ajc4// ca4SZCojxfqtrhw3EkfZtvFLJh1tsvAkqZkgHmjJxwA+lY78lQ1ncBZ99dePpuHu MBQew3769SkEA8kk/s5XiYqJAJUDBRAvXHHu0fqxudbcij0BAQFjA/0W8glucqO0 wtSPyCF3qGimFLHxZmd9Cw6Zlf8Ftfy8rPVrkGQGfioA29b64oZ1SUTwsswSbU8P n0KKFxvc6hYM5TzMg4gSu+vLh6pr4vMRdXyecF16z4BrUwIwZLP4rc5o/vyVDskI ahj1NdNYh6V8B0FUEbhVBxJBGfy2NF0bZ7QoQVNTSVNUIFRlYW0gPGFzc2lzdEBh c3Npc3QuaW1zLmRpc2EubWlsPokAlQIFEC45Ys3KbyuD/AwC1QEBKPED/2dwnN+/ OE2iHhvGwv3jZtsm6cH+GVkpNpc0w0vQOKvVwUnLwuETSv+eryz9Fl7nL0U2tv/5 V81dXqqc5C7EvOQW1Dt9RBSjEOundYrOzsfELIMrwh1iJXsIxG7g7iil0HeKzxsQ E/nBFwJbgP6SQaYF4wy7TPuXw+IVVddp0p1riQCVAgUQLi5x6IdGPdIwvm+pAQFN EwP+Ml0i+yurXH1ZvQApz+HKwqLrRTNsNdHu2CsQ/OdGo4Vq4eqyPTvrI1OVjm6o jye7GR3RMPygEcz0oox/+YfB5cmGugpZLFsWLspswrFGGCXLXY3Bq7mpH14GENU5 JMlHzazeRvdDbkSv700Xu25JshjWIzfTY2nNUNfFlRefQoY= =8gi/ - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAwUBMYaiR9H6sbnW3Io9AQHoQwP7BkBnt1bWnKFeRJ9oAq6kbnmnx+6sK1n4 MrRHYktWt3OV7m72K4PEBYSztyDDmKklRp6YHyBlT94uzndJ1+2koxBIO0eEqfeN W0DHs4nszKRvdMcQCgd/uhfbmUluqpjWxQHYHkmKta633UxoHRQVSIVfAPzkEtfc 16jRLbZ5bac= =fVLP -----END PGP SIGNATURE----- -- _______ A S S I S T | / Automated Systems Security Incident Support Team | / Duty phone: +1 800 357 4231 (DSN 327 4700) 24hr | / Integritas Commercial +1 703 607 4700 24hr | < et 24hr pager: +1 800 791 4857 | \ Celeritas BBS: +1 703 607 4710 (DSN 327 4710) | \ Unclass FAX: +1 703 607 4735 (DSN 327 4735) | \ e-mail: ASSIST@ASSIST.MIL ------- Anonymous FTP: FTP.ASSIST.MIL (IP 199.211.123.12) **************************************************************************** * * * The point of contact for NIPRNET security-related incidents is the * * Security Coordination Center (SCC). * * * * E-mail address: SCC@NIC.DDN.MIL * * * * Telephone: 1-(800)-365-3642 * * * * NIC Help Desk personnel are available from 7:00 a.m.-7:00 p.m. EST, * * Monday through Friday except on federal holidays. * * * **************************************************************************** PLEASE NOTE: Some users outside of the DOD computing communities may receive DISN Security Bulletins. If you are not part of the DOD community, please contact your agency's incident response team to report incidents. Your agency's team will coordinate with DOD. The Forum of Incident Response and Security Teams (FIRST) is a world-wide organization. A list of FIRST member organizations and their constituencies can be obtained by sending email to docserver@first.org with an empty subject line and a message body containing the line: send first-contacts. This document was prepared as an service to the DOD community. Neither the United States Government nor any of their employees, makes any warranty, expressed or implied, or assumes any legal liability or responsibility for the accuracy, completeness, or usefulness of any information, product, or process disclosed, or represents that its use would not infringe privately owned rights. Reference herein to any specific commercial products, process, or service by trade name, trademark manufacturer, or otherwise, does not necessarily constitute or imply its endorsement, recommendation, or favoring by the United States Government. The opinions of the authors expressed herein do not necessarily state or reflect those of the United States Government, and shall not be used for advertising or product endorsement purposes.