National Vulnerability Database is Up...Powered by Mitre's CVE(R).

NVD is a comprehensive cyber security vulnerability database that integrates all publicly available U.S. Government vulnerability resources and provides references to industry resources. It is based on and synchronized with the CVE vulnerability naming standard.

Check it out here: http://nvd.nist.gov/


You can look for vulnerabilities on just about anything. The output is fantastic.

Here's a small project:

1) Go to www.netcraft.com
2) Type in YOUR website (ie www.mydomain.com)
3) See what type of web server your host is running... (for example: IIS 5.0)
4) Go back to the National Vulnerability Database
5) Type in IIS 5.0 and see what kind of vulnerabilities show up.
6) Email your ISP and say "have you fixed this yet?" with a copy of the NVD query results...get it?

Good luck and happy hunting and hardening of your network!

Best regards,
Gary S. Miliefsky
Chief Technology Officer
NetClarity - Preemptive, Proactive Protection
http://www.netclarity.net