About us

The PIONIER-CERT (former: POL34-CERT) is a Computer Security Incident Response Team that has been established to provide effective incident response service to members and users of Polish Scientific Broadband Network PIONIER (and POL34/622). The need for such a service has been repeatedly submitted by many parties, both users of our network and our external partners (network operators mainly).

The main purpose of this initiative is to establish a single point of contact for all security incidents involving hosts classified as belonging to the constituency of PIONIER-CERT. The primary goal is to provide active incident handling with high quality technical support which can be guaranteed by five-year experience acquired by the Security Team of Poznan Supercomputing and Networking Center. As practical dealing with incidents is mainly related to the information analysis process, the team can also be considered as the coordination center managing actual responses and exchanging critical information among various interested parties.

The PIONIER-CERT Initiative should also be considered as the representative entity of PIONIER (and POL34/622) in security matters for any outside organizations.

The English version of this site is for information purposes only, as its main version, dedicated to the actual members of our constituency is in Polish. Therefore, the information hereby is limited only to the most necessary, which is supposed to help in reporting an accident involving a site belonging to our constituency. However, we do consider a possibility of providing some additional information in English (such as articles and some security tutorials)in the future.

More details according PIONIER-CERT can be found in its official description.

Check IP owner:
News:

Critical vulnerabilities in Microsoft codecs and Wordpad/Office converters

2009-12-15

Platform: Windows

Microsoft announced the availability of an update that provides security mitigations to the Indeo codec on supported editions of Microsoft Windows 2000, Windows XP, and Windows Server 2003. The Indeo codec could allow remote code execution when opening specially crafted media content. The update blocks the Indeo codec from being launched in Internet Explorer or Windows Media player. The update also removes the ability for this codec to be loaded when browsing the Internet with any other applications. See: Microsoft Security Advisory

Microsoft also informed that vulnerability in WordPad and Office text converters could allow remote code execution if a specially crafted Word 97 file is opened in WordPad or Microsoft Office Word. An attacker could gain the same privileges as the user running vulnerable application. Users whose accounts are configured to have fewer privileges on the system could be less impacted than users who operate with administrative privileges. For more information see the Microsoft Security Bulletin

Menu

Links