National Vulnerability Database (NVD) website of U.S Government has been hacked by some unknown hacker last week, the website (http://nvd.nist.gov/index.html) is not available at the time we are writing this post and it is down from Friday due to a Malware Infection on two web servers which was discovered on Tuesday.
Message of NVD on their Website
According to a Google+post by Kim Halavakoski, When he was trying to get some vulnerability information from nvd.nist.gov and just got a “Page not available” page. So he mailed them and asked what is going on, why can’t I access the page…
Below is the response of the mail of Kim Halavakoski:
Thanks for your inquiry to the NIST Director’s Office webmaster. Below is a brief statement describing the issues we’re experiencing with the National Vulnerability Database. We do not know yet exactly when the database will be back online but we are working as quickly as we can to get the Web site back in service.The National Vulnerability Database public-facing Web site and several other NIST-hosted Web sites are currently unavailable due to discovery of malware on two NIST Web servers.On Friday March 8, a NIST firewall detected suspicious activity and took steps to block unusual traffic from reaching the Internet. NIST began investigating the cause of the unusual activity and the servers were taken offline. Malware was discovered on two NIST Web servers and was then traced to a software vulnerability.
Thanks for your inquiry to the NIST Director’s Office webmaster. Below is a brief statement describing the issues we’re experiencing with the National Vulnerability Database. We do not know yet exactly when the database will be back online but we are working as quickly as we can to get the Web site back in service.The National Vulnerability Database public-facing Web site and several other NIST-hosted Web sites are currently unavailable due to discovery of malware on two NIST Web servers.On Friday March 8, a NIST firewall detected suspicious activity and took steps to block unusual traffic from reaching the Internet. NIST began investigating the cause of the unusual activity and the servers were taken offline. Malware was discovered on two NIST Web servers and was then traced to a software vulnerability.
Currently there is no evidence that NVD or any other NIST public pages contained or were used to deliver malware to users of these NIST Web sites.
NIST continually works to maintain the integrity of its IT infrastructure and acts to limit the impact of malware on its systems. We regret the impact this has had on our services.
NIST is continuing to respond to the incident and will restore these public-facing servers as quickly as possible.
Sincerely,
Gail Porter
NIST Public Inquiries Office
National Institute of Standards and Technology
(301) 975-3392
