|
CIAC Advisory number A- 8
NOTICE: TO ALL CONCERNED Certain text files and messages contained on this site deal with activities and devices which would be in violation of various Federal, State, and local laws if actually carried out or constructed. The webmasters of this site do not advocate the breaking of any law. Our text files and message bases are for informational purposes only. We recommend that you contact your local law enforcement officials before undertaking any project based upon any information obtained from this or any other web site. We do not guarantee that any of the information contained on this system is correct, workable, or factual. We are not responsible for, nor do we assume any liability for, damages resulting from the use of any information on this site.
FOR OFFICIAL DEPARTMENT OF ENERGY USE ONLY
________________________________________________________________________
THE COMPUTER INCIDENT ADVISORY CAPABILITY
CIAC
INFORMATION BULLETIN
________________________________________________________________________
Information about a UNICOS Problem
November 29, 1989, 1630 PST Number A-8
CIAC has been informed of a system bug in the UNICOS operating system which
runs on CRAY computers. This bug involves the possibility of losing control
over the separation of users and need-to-know. For further information,
please contact your Computer Security Operations Manager (CSOM). A notice
describing this problem in greater detail was sent to your CSOM on
November 28, 1989.
Ana Maria De Alvare', CIAC
Lawrence Livermore National Laboratory
P.O. Box 808, L-619
Livermore, CA 94550
(415) 422-7007 or FTS 532-7007
Send electronic mail to: [email protected]
CIAC FAX: (415) 423-0913 FTS 543-0913
DISTRIBUTION
Alexander, D. (LANL) Kessler, H.R. (Albuquerque Operations)
Anderson, A. (SAN) Kramer, K. (Chicago Operations)
Baker, A. (LANL CCS) Madden, T. (SRO)
Baker, D. (Richland Operations) Marcum, R. (ORNL)
Berg, T. (SAN) Marsden, L. (Westinghouse Idaho)
Breault, L. (DP-34) Meadows, B. (SRP)
Brown, R. (EG&G Idaho) Miles, D. (EG&G Idaho)
Clouse, B. (Chicago Operations) Nicolayeff, N. (Idaho Operations)
Cole, C. (LLNL) Niziol, E. (Oak Ridge Operations)
Cyganowski, W. (SAN) Orton, J. (Westinghouse Hanford)
Dolven, L. (Rockwell INEL) Phillips, R.E. (Albuquerque Operations)
Elder, R. (Bettis) Provencher, D. (Schenectady)
Endler, R. (SRO) Przysucha, J. (MA-24)
Faux-Berhans (DP-34) Rosenbloom, H. (LANL CCS)
Fish, J. (Hanford Env't Health) Scharping, R. (Argonne)
Fluckinger, J.D. (PNL) Shepherd, J. (DP-34)
Folkendt, S. (Sandia-Livermore) Sibert, P. (MA-204)
Glock, T. (Pittsburgh Naval Reactors) Sorter, B. (EG&G Idaho)
Gurth, R. (Westinghouse Hanford) Staley, J. (MA-205.5)
Haldy, J. (Pittsburgh Naval Reactors) Surface, R. (Albuquerque Operations)
Hann, H. (Idaho Operations) Troyer, J. (Argonne)
Johnston, B. (PNL) Watson, W. (Oak Ridge Operations)
Jones, D.C. (Sandia-Albuquerque) Wilson, W. (Sandia-Livermore)
CIAC BULLETINS ISSUED
SUN 386i authentication bypass vulnerability
nVIR virus alert
/dev/mem vulnerability
tftp/rwalld vulnerability
"Little Black Box" (Jerusalem) virus alert
restore/dump vulnerability
rcp/rdist vulnerability
Internet trojan horse alert
Columbus Day (DataCrime) virus alert
Columbus Day (DataCrime) virus alert (follow-up notice)
Internet hacker alert (notice A-1)
HEPnet/SPAN network worm alert (notice A-2)
HEPnet/SPAN network worm alert (notice A-3)
HEPnet/SPAN network worm alert (notice A-4)
rcp vulnerability (second vulnerability, notice A-5)
Trojan horse in Norton utilities (notice A-6)
UNICOS vulnerability (classified, notice A-7)
UNICOS problem (notice A-8)
|
|
