Die Top10 Schwachstellen aller Zeiten zusammengestellt vom US-Cert Team

Das US-Cert Team hat mit der Nummer TA15-119A die Aufstellung der Creme de la Creme der schwersten und am häufigsten angewandten Schwachstellen vorgestellt, mit denen man Ihre PCs und Server mit Schadsoftware versehen kann

IT Security

Somit sollte die Hausaufgabe für alle Admins bis zum kommenden Wochenende lauten:

.) Überprüfung aller Systeme (interne und externe), ob einer Ihrer Server oder Rechner noch mit einer der unten angeführten Schwachstellen ungepatcht aktiv ist.
.) Alle Admins, die Systeme nicht mit dem notwendigen Patch versehen könnten, sollten zumindest das Looging soweit einschalten, dass mögliche Angriffe auf die Systeme schnellstmöglich entdeckt werden können beziehungsweise diese Systeme in ein separates Netzwerksegment verschieben.

Wir gehen davon aus, dass in den nächsten Tagen gezielt viele Internetuser genau diese 30 nun schön aufgelisteten Schwachstellen überprüfen werden.

Happy Networking
Ihr CFM-Cyberforensic-Team

MICROSOFT
CVE	Affected Products	Patching Information
CVE-2006-3227	Internet Explorer	Microsoft Malware Protection Encyclopedia Entry (link is external)
CVE-2008-2244	Office Word	Microsoft Security Bulletin MS08-042 (link is external)
CVE-2009-3129	Office Office for Mac Open XML File Format Converter for Mac Office Excel Viewer Excel Office Compatibility Pack for Word, Excel, and PowerPoint	Microsoft Security Bulletin MS09-067 (link is external)
CVE-2009-3674	Internet Explorer	Microsoft Security Bulletin MS09-072 (link is external)
CVE-2010-0806	Internet Explorer	Microsoft Security Bulletin MS10-018( link is external)
CVE-2010-3333	Office Office for Mac Open XML File Format Converter for Mac	Microsoft Security Bulletin MS10-087 (link is external)
CVE-2011-0101	Excel	Microsoft Security Bulletin MS11-021 (link is external)
CVE-2012-0158	Office SQL Server BizTalk Server Commerce Server Visual FoxPro Visual Basic	Microsoft Security Bulletin MS12-027(link is external)
CVE-2012-1856	Office SQL Server Commerce Server Host Integration Server Visual FoxPro Visual Basic	Microsoft Security Bulletin MS12-060 (link is external)
CVE-2012-4792	Internet Explorer	Microsoft Security Bulletin MS13-008 (link is external)
CVE-2013-0074	Silverlight and Developer Runtime	Microsoft Security Bulletin MS13-022 (link is external)
CVE-2013-1347	Internet Explorer	Microsoft Security Bulletin MS13-038 (link is external)
CVE-2014-0322	Internet Explorer	Microsoft Security Bulletin MS14-012 (link is external)
CVE-2014-1761	Microsoft Word Office Word Viewer Office Compatibility Pack Office for Mac Word Automation Services on SharePoint Server Office Web Apps Office Web Apps Server	Microsoft Security Bulletin MS14-017 (link is external)
CVE-2014-1776	Internet Explorer	Microsoft Security Bulletin MS14-021 (link is external)
CVE-2014-4114	Windows	Microsoft Security Bulletin MS14-060 (link is external)

ORACLE
CVE	Affected Products	Patching Information
CVE-2012-1723	Java Development Kit, SDK, and JRE	Oracle Java SE Critical Patch Update Advisory – June 2012 (link is external)
CVE-2013-2465	Java Development Kit and JRE	Oracle Java SE Critical Patch Update Advisory – June 2013 (link is external)

ADOBE
CVE	Affected Products	Patching Information
CVE-2009-3953	ReaderAcrobat	Adobe Security Bulletin APSB10-02 (link is external)
CVE-2010-0188	ReaderAcrobat	Adobe Security Bulletin APSB10-07 (link is external)
CVE-2010-2883	ReaderAcrobat	Adobe Security Bulletin APSB10-21 (link is external)
CVE-2011-0611	Flash PlayerAIRReaderAcrobat	Adobe Security Bulletin APSB11-07 (link is external) Adobe Security Bulletin APSB11-08 (link is external)
CVE-2011-2462	ReaderAcrobat	Adobe Security Bulletin APSB11-30 (link is external)
CVE-2013-0625	ColdFusion	Adobe Security Bulletin APSB13-03 (link is external)
CVE-2013-0632	ColdFusion	Adobe Security Bulletin APSB13-03 (link is external)
CVE-2013-2729	ReaderAcrobat	Adobe Security Bulletin APSB13-15 (link is external)
CVE-2013-3336	ColdFusion	Adobe Security Bulletin APSB13-13 (link is external)
CVE-2013-5326	ColdFusion	Adobe Security Bulletin APSB13-27 (link is external)
CVE-2014-0564	Flash Player AIR AIR SDK & Compiler	Adobe Security Bulletin APSB14-22 (link is external)

OpenSSL
CVE	Affected Product	Patching Information
CVE-2014-0160	OpenSSL	CERT Vulnerability Note VU#720951

Implement the following four mitigation strategies
As part of a comprehensive security strategy, network administrators should implement the following four mitigation strategies, which can help prevent targeted cyber attacks.

Ranking	Mitigation Strategy	Rationale
1	Use application whitelisting to help prevent malicious software and unapproved programs from running.	Application whitelisting is one of the best security strategies as it allows only specified programs to run, while blocking all others, including malicious software.
2	Patch applications such as Java, PDF viewers, Flash, web browsers and Microsoft Office.	Vulnerable applications and operating systems are the target of most attacks. Ensuring these are patched with the latest updates greatly reduces the number of exploitable entry points available to an attacker.
3	Patch operating system vulnerabilities.
4	Restrict administrative privileges to operating systems and applications based on user duties.	Restricting these privileges may prevent malware from running or limit its capability to spread through the network.