- NZNOG - lists.nznog.org

APNIC EC Results
by McDonald Richards 26 Feb '09

26 Feb '09

Sorry for the cross-post but since a bunch of NZ proxies helped this happen I figured I'd share the news here as well. For all those not watching the live feed, James Spenceley was just elected on to the APNIC EC. I'm sure there will be a more formal announcement later from APNIC but figured you'd all want to know how your proxies went. Macca

3 2

APNIC 27 - Meeting update
by Srinivas (Sunny) Chendi 26 Feb '09

26 Feb '09

________________________________________________________________________ APNIC 27 23-27 February 2009, Manila, Philippines ________________________________________________________________________ Thank you to everyone who contributed to APNIC 27, held in conjunction with APRICOT 2009. The preliminary event participation statistics are: Total number of delegates (including APRICOT): 473 Delegates at APNIC Member Meeting: 114 Economies represented: 40 APNIC member organizations represented: 113 APNIC held remote participation events via video conference in Suva, Fiji and Colombo, Sri Lanka. Attendance figures for these events were: Suva, Fiji 10 Colombo, Sri Lanka 22 Web-based online participation options included a choice of video, audio and text chat. Participation figures for online remote delegates were: Online remote participation feeds 2518 To read, watch or listen to archives from the meeting, go to: http://meetings.apnic.net Elections --------- During the APNIC Member Meeting (AMM) in Manila on Friday, 27 February 2009, the following candidates were elected to the APNIC Executive Council (EC). - Jian Zhang - James Spencley - Kuo-Wei Wu - Hyun Joon Kwon Congratulations to the successful candidates: Election details are available at: http://meetings.apnic.net/elections Meeting decisions ----------------- Policy SIG Seven policy proposals were discussed. The following proposals reached consensus and were subsequently ratified at the APNIC Member Meeting. These proposals are now subject to a 'last call' for comments: prop-050 IPv4 address transfers (with modifications) prop-069 Global policy proposal for the allocation of IPv4 blocks to Regional Internet Registries The following proposals did not reach consensus and have been abandoned: prop-063 Reducing timeframe of IPv4 allocations from twelve to six months prop-060 Change in the criteria for the recognition of NIRs in the APNIC region prop-070 Maximum IPv4 allocation size The following proposals were withdrawn by the author(s): prop-068 Inter-RIR transfer policy prop-067 A simple transfer proposal You can check the status of all policy proposals on the following page: http://www.apnic.net/policy/proposals MoUs Signed ----------- APNIC signed Memorandums of Understanding with the following organizations: NSP (Networkers' Society of Pakistan) ASTI (Advanced Science and Technology Institute PHNOG (Philippine Network Operators Group) Meeting sponsors ---------------- APNIC offers its deepest thanks to the sponsors of APNIC 27, whose invaluable contributions allowed APNIC to offer a meeting program of a very high standard: http://meetings.apnic.net/sponsors Upcoming APNIC meetings ----------------------- APNIC 28 24-28 August 2009 Beijing, China http://www.apnic.net/meetings/28 APNIC 29 1-5 March 2010 Kuala Lumpur, Malaysia http://www.apnic.net/meetings/29 Regards -------------------------------------------------------------------- Srinivas (Sunny) Chendi email: sunny(a)apnic.net External Relations Manager, APNIC sip: sunny(a)voip.apnic.net http://www.apnic.net ph/fx: +61 7 3858 3100/99 ____________________________________________________________________

1 0

Interesting - How a Router's Missed Range Check Nearly Crashed the Internet
by Skeeve Stevens 26 Feb '09

26 Feb '09

>From the front page of Slashdot: Barlaam writes "A bug by router vendor A (omitting a range check from a critical field in the configuration interface) tickled a bug from router vendor B (dropping BGP sessions when processing some ASPATH attributes with length very close to 256), causing a ripple effect that caused widespread global routing instability last week. The flaw lay dormant until one of vendor A's systems was deployed in an autonomous system whose ASN, modulo 256, was greater than 250. At that point, the Internet was one typo away from disaster. Other router vendors, who were not affected by the bug, happily propagated the trigger message to every vulnerable system on the planet in about 30 seconds. Few people appreciate how fragile and unsecured the Internet's trust-based critical infrastructure really is - this is just the latest example." Vendor A, in this case, is a Latvian router vendor called MikroTik. Is this just the 4byte ASN thing from months ago or something new? I knew there was a reason I hated Mikrotik's so much. -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve -- NOC, NOC, who's there? Disclaimer: Limits of Liability and Disclaimer: This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. eintellego Pty Ltd and each legal entity in the Tefilah Pty Ltd group of companies reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. Any reference to costs, fee quotations, contractual transactions and variations to contract terms is subject to separate confirmation in writing signed by an authorised representative of eintellego. Whilst all efforts are made to safeguard inbound and outbound e-mails, we cannot guarantee that attachments are virus-free or compatible with your systems and do not accept any liability in respect of viruses or computer problems experienced.

3 2

NZRR Route Registry Update
by NZRR Database Notifications 23 Feb '09

23 Feb '09

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS10022 descr: advertised to AS9439 by Datacom Systems Wellington Limited - AS10022 members: 202.175.142.0/23^23-29, 192.203.216.0/24^24-29, 202.27.77.0/24^24-29, 202.36.12.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: matthewda(a)datacom.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20080111 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS10022 descr: advertised to AS9439 by Datacom Systems (Wellington) Limited - AS10022 members: 202.175.142.0/23^23-29, 192.203.216.0/24^24-29, 202.27.77.0/24^24-29, 202.36.12.0/24^24-29, 202.36.198.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: matthewda(a)datacom.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20090224 source: NZRR ------------------------------------------------------------

1 0

Re: [nznog] [AusNOG] (Urgent) APNIC Executive Council (EC) Election this Week - We need your votes!
by Skeeve Stevens 22 Feb '09

22 Feb '09

I should have mentioned... if you have already assigned your votes for James - and this includes the proxy votes you filled out as AUSNOG2 or have arranged privately. My email is mainly to remind anyone who hasn't done anything with their votes yet and might consider it at the last minute. The reason I have also asked them for myself is that a) I am here onsite, so I can use them, b) most of the other guys are very busy doing their political things and I am happy to spend the time filling out forms to help James and David get elected. ...Skeeve -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve -- NOC, NOC, who's there? Disclaimer: Limits of Liability and Disclaimer: This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. eintellego Pty Ltd and each legal entity in the Tefilah Pty Ltd group of companies reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. Any reference to costs, fee quotations, contractual transactions and variations to contract terms is subject to separate confirmation in writing signed by an authorised representative of eintellego. Whilst all efforts are made to safeguard inbound and outbound e-mails, we cannot guarantee that attachments are virus-free or compatible with your systems and do not accept any liability in respect of viruses or computer problems experienced. From: Sean K. Finn [mailto:Sean.Finn(a)ozservers.com.au] Sent: Monday, 23 February 2009 3:04 PM To: Skeeve Stevens; 'ausnog(a)lists.ausnog.net'; 'NZNOG(a)list.waikato.ac.nz' Subject: RE: [AusNOG] (Urgent) APNIC Executive Council (EC) Election this Week - We need your votes! For the benefit of all, Would this be the same as the proxy votes assigned after AusNog02 last year, or if we wanted to re-allocate rights for this election would we need to submit another proxy form? I.e. Were the proxy rights assigned during AusNOG02 for this election? Cheers, Sean. From: ausnog-bounces(a)lists.ausnog.net [mailto:ausnog-bounces(a)lists.ausnog.net] On Behalf Of Skeeve Stevens Sent: Monday, 23 February 2009 1:51 PM To: ausnog(a)lists.ausnog.net; NZNOG(a)list.waikato.ac.nz Subject: [AusNOG] (Urgent) APNIC Executive Council (EC) Election this Week - We need your votes! Hey Everyone, I am here in Manila at the APRICOT 2009/APNIC 27 conference and it looks like this week is going to be a lot of fun with great people to meet as well as some very interesting things happening. The key issue I am sending this email to the AU/NZNOG and Aussie-ISP lists is to appeal to anyone who has not yet decided to, or just plain forgot to do anything about the voting power they may have as an APNIC member. We have a chance of getting two Australians onto the APNIC EC. The current membership is listed at http://www.apnic.net/ec/ and as you can see, it would be massively beneficial if we had some Australian representation. Our two nominations are James Spenceley<http://meetings.apnic.net/elections/james-spenceley.html> from Vocus Communications (www.vocus.com.au<http://www.vocus.com.au>) and David Woodgate<http://meetings.apnic.net/elections/david-woodgate.html> from Telstra. Both of these guys have both been involved in internet policy making for a VERY long time and are both worthy for the positions available on the EC. They are very respected in the Internet Community, both in Australia and NZ and the world over, both having presented policies an given talks at many conferences. If you don't know them and want some more information, please refer to their Nomination profiles by clicking on their names above. There are 10 nominations and 4 positions available with 1 re-standing with most of the nominees are people from countries with massive populations and large voting power such as China, India and so on. If we have any chance to get Australia/NZ to have some involvement in influencing the direction of internet governance and policy going forward, it is time we stood up and did something with out votes instead of wasting them. To me, it doesn't matter if you like or dislike either James or David, have a past or future with these guys, but if you want to support the Internet community in Australia and New Zealand as a whole, I think that these guys are will represent the issues of Australia/New Zealand very well and certainly worth the 5 minutes to fill out the proxy form and help get them elected. Details about the current election are here: http://meetings.apnic.net/elections/index.html The list of current nominations are as listed at: http://www.apnic.net/news/2009/0216a.html If you wish to contribute your votes there are two ways. You can assign proxy, or you can vote online using MyAPNIC, but many have not registered for this, and it is too late now if you already have not. I am happy to be the person for you to allocate your votes to, which you can do once off for this election by using the Proxy Form included. Please note: A proxy appointment is valid only for a single election, so I can only vote for you in this one case. You are not assigning me permanent voting rights for your organisation. If you didn't receive the attached Proxy form you can download a pre-filled one with my details from http://www.eintellego.net/apnic/APNIC27VoteProxySkeeve.pdf, or failing that, use my details below - don't forget to inform me if you are sending me your proxy as I need to know what members I am collecting the forms for. For details: http://meetings.apnic.net/elections/about/proxy.html are the official details on assigning your proxy votes. If you don't know your membership level as it is right now, Aussies please check http://www.apnic.net/apnic-bin/memlist.pl?size=&cc=au&sort=ascending or for the Kiwi's http://www.apnic.net/apnic-bin/memlist.pl?size=&cc=nz&sort=ascending which will show you what APNIC considers your membership level to currently be. Note: You may have more resources than your current level, but your annual membership might not have come up yet. All your votes are useful, even if you are an associate with only 1 vote as they all add up and elections can come down to just a couple of votes. The number of votes you have are as follows: Associate 1 Very small 2 Small 4 Medium 8 Large 16 Very large 32 Extra large 64 My voting will be for James and David, but with the excess votes, I will be following their advice on who else should be supported. If you know anyone on that membership list who isn't using those votes, please contact them... the larger the members the better as it is less work, but every single vote counts. Forward this email to them and they might have the 5 minutes to fill it out. Just remember, it has to be completed by the Corporate Contact. Also, this has to be done today or tomorrow... please spare the 5 minutes to help us have a say in our own future as ISP's and internet community members. If you have any questions, please send them and I will get back to you asap ...Skeeve -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve -- NOC, NOC, who's there? Disclaimer: Limits of Liability and Disclaimer: This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. eintellego Pty Ltd and each legal entity in the Tefilah Pty Ltd group of companies reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. Any reference to costs, fee quotations, contractual transactions and variations to contract terms is subject to separate confirmation in writing signed by an authorised representative of eintellego. Whilst all efforts are made to safeguard inbound and outbound e-mails, we cannot guarantee that attachments are virus-free or compatible with your systems and do not accept any liability in respect of viruses or computer problems experienced.

1 0

S92a implementation delayed, clause may be suspended.
by Juha Saarinen 22 Feb '09

22 Feb '09

http://bit.ly/3RiQL Bit.ly URL goes to Computerworld NZ. -- Juha Saarinen juha(a)saarinen.org

1 1

(Urgent) APNIC Executive Council (EC) Election this Week - We need your votes!
by Skeeve Stevens 22 Feb '09

22 Feb '09

Hey Everyone, I am here in Manila at the APRICOT 2009/APNIC 27 conference and it looks like this week is going to be a lot of fun with great people to meet as well as some very interesting things happening. The key issue I am sending this email to the AU/NZNOG and Aussie-ISP lists is to appeal to anyone who has not yet decided to, or just plain forgot to do anything about the voting power they may have as an APNIC member. We have a chance of getting two Australians onto the APNIC EC. The current membership is listed at http://www.apnic.net/ec/ and as you can see, it would be massively beneficial if we had some Australian representation. Our two nominations are James Spenceley<http://meetings.apnic.net/elections/james-spenceley.html> from Vocus Communications (www.vocus.com.au<http://www.vocus.com.au>) and David Woodgate<http://meetings.apnic.net/elections/david-woodgate.html> from Telstra. Both of these guys have both been involved in internet policy making for a VERY long time and are both worthy for the positions available on the EC. They are very respected in the Internet Community, both in Australia and NZ and the world over, both having presented policies an given talks at many conferences. If you don't know them and want some more information, please refer to their Nomination profiles by clicking on their names above. There are 10 nominations and 4 positions available with 1 re-standing with most of the nominees are people from countries with massive populations and large voting power such as China, India and so on. If we have any chance to get Australia/NZ to have some involvement in influencing the direction of internet governance and policy going forward, it is time we stood up and did something with out votes instead of wasting them. To me, it doesn't matter if you like or dislike either James or David, have a past or future with these guys, but if you want to support the Internet community in Australia and New Zealand as a whole, I think that these guys are will represent the issues of Australia/New Zealand very well and certainly worth the 5 minutes to fill out the proxy form and help get them elected. Details about the current election are here: http://meetings.apnic.net/elections/index.html The list of current nominations are as listed at: http://www.apnic.net/news/2009/0216a.html If you wish to contribute your votes there are two ways. You can assign proxy, or you can vote online using MyAPNIC, but many have not registered for this, and it is too late now if you already have not. I am happy to be the person for you to allocate your votes to, which you can do once off for this election by using the Proxy Form included. Please note: A proxy appointment is valid only for a single election, so I can only vote for you in this one case. You are not assigning me permanent voting rights for your organisation. If you didn't receive the attached Proxy form you can download a pre-filled one with my details from http://www.eintellego.net/apnic/APNIC27VoteProxySkeeve.pdf, or failing that, use my details below - don't forget to inform me if you are sending me your proxy as I need to know what members I am collecting the forms for. For details: http://meetings.apnic.net/elections/about/proxy.html are the official details on assigning your proxy votes. If you don't know your membership level as it is right now, Aussies please check http://www.apnic.net/apnic-bin/memlist.pl?size=&cc=au&sort=ascending or for the Kiwi's http://www.apnic.net/apnic-bin/memlist.pl?size=&cc=nz&sort=ascending which will show you what APNIC considers your membership level to currently be. Note: You may have more resources than your current level, but your annual membership might not have come up yet. All your votes are useful, even if you are an associate with only 1 vote as they all add up and elections can come down to just a couple of votes. The number of votes you have are as follows: Associate 1 Very small 2 Small 4 Medium 8 Large 16 Very large 32 Extra large 64 My voting will be for James and David, but with the excess votes, I will be following their advice on who else should be supported. If you know anyone on that membership list who isn't using those votes, please contact them... the larger the members the better as it is less work, but every single vote counts. Forward this email to them and they might have the 5 minutes to fill it out. Just remember, it has to be completed by the Corporate Contact. Also, this has to be done today or tomorrow... please spare the 5 minutes to help us have a say in our own future as ISP's and internet community members. If you have any questions, please send them and I will get back to you asap ...Skeeve -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve -- NOC, NOC, who's there? Disclaimer: Limits of Liability and Disclaimer: This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. eintellego Pty Ltd and each legal entity in the Tefilah Pty Ltd group of companies reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. Any reference to costs, fee quotations, contractual transactions and variations to contract terms is subject to separate confirmation in writing signed by an authorised representative of eintellego. Whilst all efforts are made to safeguard inbound and outbound e-mails, we cannot guarantee that attachments are virus-free or compatible with your systems and do not accept any liability in respect of viruses or computer problems experienced.

1 0

UPDATE: CCIP Alert: Adobe Acrobat unpatched vulnerability
by Paul McKitrick 21 Feb '09

21 Feb '09

UPDATE: Apologies for the previous email that contained the wrong content. Good Afternoon, For those of you who are not already aware, CCIP would like to bring your attention the critical vulnerability in Adobe Reader and Adobe Acrobat that could potentially allow an attacker to take control of the affected system which was released on February 19: http://www.adobe.com/support/security/advisories/apsa09-01.html CCIP is releasing this alert as it has been made aware of active exploitation of this vulnerability in the wild. Adobe have stated that they are expecting to release an update by 11 March 2009 for Adobe 9 and updates for other versions (8 and 7) to follow soon after. Adobe has reported that the following versions are affected: * Adobe Reader 9 and earlier versions * Adobe Acrobat Standard, Pro, and Pro Extended 9 and earlier versions Shadowserver have a write up on their website: http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20090219 The US-CERT write up (https://www.kb.cert.org/vuls/id/905281) includes the following mitigation advice: Disable JavaScript in Adobe Reader and Acrobat Disabling Javascript may prevent this vulnerability from being exploited. Acrobat JavaScript can be disabled in the General preferences dialog (Edit -> Preferences -> JavaScript and un-check Enable Acrobat JavaScript). Some vendors ship javascript support in a seperate package. Removing this package may remove javascript support in the Adobe PDF reader. Prevent Internet Explorer from automatically opening PDF documents The installer for Adobe Reader and Acrobat configures Internet Explorer to automatically open PDF files without any user interaction. This behavior can be reverted to the safer option of prompting the user by importing the following as a .REG file: Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\AcroExch.Document.7] "EditFlags"=hex:00,00,00,00 Disable the displaying of PDF documents in the web browser Preventing PDF documents from opening inside a web browser may mitigate this vulnerability. If this workaround is applied to updated versions of the Adobe reader, it may mitigate future vulnerabilities. To prevent PDF documents from automatically being opened in a web browser: 1. Open Adobe Acrobat Reader. 2. Open the Edit menu. 3. Choose the preferences option. 4. Choose the Internet section. 5. Un-check the "Display PDF in browser" check box. Do not access PDF documents from untrusted sources Do not open unfamiliar or unexpected PDF documents, particularly those hosted on web sites or delivered as email attachments Regards, The CCIP Team -- Centre for Critical Infrastructure Protection Government Communications Security Bureau P: +64 4 498 7654 F: +64 4 498 7655 E: info(a)ccip.govt.nz I: www.ccip.govt.nz --- This e-mail contains official New Zealand Government information, which is intended for the use of addressees only. If you have received this e-mail in error, please notify the sender immediately and delete. You should not further disseminate, distribute or copy this e-mail in any way. ---

1 0

CCIP Alert: Adobe Acrobat unpatched vulnerability
by Paul McKitrick 21 Feb '09

21 Feb '09

Good Afternoon, For those of you who are not already aware, CCIP would like to bring your attention the the Critical Microsoft Security Bulletin MS09-002 that was released on February 10: http://www.microsoft.com/technet/security/bulletin/ms09-002.mspx Microsoft have announced a vulnerability in Internet Explorer 7 that could allow remote code execution if a user views a specially crafted Web page. Administrators are advised to patch immediately. Microsoft have rated as Critical for Window XP and Windows Vista and as Moderate for Windows Server 2003 and Windows Server 2008. CCIP is releasing this alert as it has been made aware of active exploitation of this vulnerability in the wild. Due to the recent impact of the Conficker worm CCIP wants to ensure that there is awareness of the active exploitation of MS09-002 and to encourage the patching of systems if they have not already been patched. AusCERT have a write up on their website: http://www.auscert.org.au/render.html?it=10477 There is also a write up on the Sourcefire Vulnerability Research Team’s blog: http://vrt-sourcefire.blogspot.com/2009/02/ms09-002-in-wild.html Regards, The CCIP Team -- Centre for Critical Infrastructure Protection Government Communications Security Bureau P: +64 4 498 7654 F: +64 4 498 7655 E: info(a)ccip.govt.nz I: www.ccip.govt.nz --- This e-mail contains official New Zealand Government information, which is intended for the use of addressees only. If you have received this e-mail in error, please notify the sender immediately and delete. You should not further disseminate, distribute or copy this e-mail in any way. ---

1 0

CCIP ALERT: Exploitation of MS09-002
by Paul McKitrick 21 Feb '09

21 Feb '09

Good Afternoon, For those of you who are not already aware, CCIP would like to bring your attention the the Critical Microsoft Security Bulletin MS09-002 that was released on February 10: http://www.microsoft.com/technet/security/bulletin/ms09-002.mspx Microsoft have announced a vulnerability in Internet Explorer 7 that could allow remote code execution if a user views a specially crafted Web page. Administrators are advised to patch immediately. Microsoft have rated as Critical for Window XP and Windows Vista and as Moderate for Windows Server 2003 and Windows Server 2008. CCIP is releasing this alert as it has been made aware of active exploitation of this vulnerability in the wild. Due to the recent impact of the Conficker worm CCIP wants to ensure that there is awareness of the active exploitation of MS09-002 and to encourage the patching of systems if they have not already been patched. AusCERT have a write up on their website: http://www.auscert.org.au/render.html?it=10477 There is also a write up on the Sourcefire Vulnerability Research Team’s blog: http://vrt-sourcefire.blogspot.com/2009/02/ms09-002-in-wild.html Regards, The CCIP Team -- Centre for Critical Infrastructure Protection Government Communications Security Bureau P: +64 4 498 7654 F: +64 4 498 7655 E: info(a)ccip.govt.nz I: www.ccip.govt.nz --- This e-mail contains official New Zealand Government information, which is intended for the use of addressees only. If you have received this e-mail in error, please notify the sender immediately and delete. You should not further disseminate, distribute or copy this e-mail in any way. ---

1 0