[HSC-Unix] SECURITY NOTIFICATION 2003-6-3

[Petrie, John F., III]

SECURITY NOTIFICATION 2003-6-3

*** EMERGENCY SHUTDOWN OF FTP PORT ***

Summary

This is an IMPORTANT notification.  The Information Security Office
recommends that TSRs share this information with their Data Owners,
Managers, and System Administrators.

As of 5:15 pm the Information Security Office directed the shutdown of all
inbound FTP traffic to the University.  This decision was based on the
following information:

-There has been at least 48 hours of heavy widespread FTP scans against the
UTHSCSA network.

-Analysis indicates that these FTP scans were originating from multiple
sources and began as early as June 11, 2003.

-Our Intrusion Detection System reported heavy targeted scans against the
UTHSCSA network on June 14, 2003, and reported at 2:55 am.

*** FTP services from outside the UTHSCSA, will be shutdown until further
notice.***

Users will still be able to use FTP from the UTHSCSA network outbound to the
internet.  Users will still have FTP services if they are using UTHSCSA VPN
from outside the University's network. 

A follow-up to this email will be forthcoming as new information becomes
available.

If you have specific questions, or need additional information you can
contact the Information Security Office at: 

Website:           http://infosec.uthscsa.edu/
Hotline:             210-567-5900
Email:               Security-Questions at uthscsa.edu

John Petrie, CBM, CISSP
Chief Information Security Officer
The University of Texas
Health Science Center at San Antonio
7703 Floyd Curl Drive
San Antonio, TX 78229-3900
v: 210-567-0652
f: 210-567-2204
p: 877-379-0947
petrie at uthscsa.edu
--------------------------------------------------------------------------
CONFIDENTIALITY STATEMENT
The information in this email may be confidential and/or privileged. This
email is intended to be reviewed by only the individual or organization
named above. If you are not the intended recipient or an authorized
representative of the intended recipient, you are hereby notified that any
review, dissemination or copying of this email and its attachments, if any,
or the information contained herein is prohibited. If you have received this
email in error, please immediately notify the sender by return email and
delete this email from your system. 
------------------------------------------------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://biochem.uthscsa.edu/pipermail/hsc-unix/attachments/20030614/d63469b6/attachment-0002.htm