CERT Coordination Center 2002 Annual Report

From January through December 2002, the CERT/CC received 204,841 email messages and over 880 hotline calls reporting computer security incidents or requesting information. We received 4,129 vulnerability reports and handled 82,094 computer security incidents during this period.

The CERT/CC published 37 advisories in 2002. Among the criteria for developing an advisory are the urgency of the problem, potential impact of intruder exploitation, and existence of a software patch or workaround.

Some of the most serious intruder activities reported to the CERT/CC in 2002 were:

• Exploitation of Vulnerabilities in Microsoft SQL Server
• Apache/mod_ssl Worm