Dailydave mailing list archives

RE: asn.1 worm


From: "Kevin Greene" <kgreene () truenorthsolutions net>
Date: Mon, 6 Jun 2005 09:52:14 -0400

how current is the "new" ASN.1 worm?

        -----Original Message----- 
        From: Jeremy Kelley [mailto:jeremy () austin ibm com] 
        Sent: Sun 6/5/2005 3:19 PM 
        To: Dave Aitel 
        Cc: dailydave 
        Subject: Re: [Dailydave] asn.1 worm
        
        

        Quoting Dave Aitel (dave () immunitysec com):
        > The new ASN.1 worm is available at
        > https://www.immunitysec.com/downloads/msupdtm.exe . It's basically just 
        > solar eclipse's killbill sploit tacked onto the already existing worm.
        > The worm itself is a pain in the rear to debug, but throw a breakpoint
        > on 41e9e0 and you should be good to go.
        
        -----
        Forbidden
        
        You don't have permission to access /downloads/msupdtm.exe on this
        server.
        -----
        
        NO WORM FOR ME!
        
        --
        Jeremy Kelley <jeremy () austin ibm com>      Threat Assessment Analyst
        gpg 1024D/E0DF8B2D 4BC3 B8B5 5B42 CC8E B6A9 2E85 32D3 C51C E0DF 8B2D
        true learning is always painful. it either points out your ignorance
        or proves that what you previously knew was wrong.         --unknown
        _______________________________________________
        Dailydave mailing list
        Dailydave () lists immunitysec com
        https://lists.immunitysec.com/mailman/listinfo/dailydave
        

IMPORTANT: The information contained in this electronic message and/or its
attachments is intended only for the use of the individual(s) named above and
may contain information that is privileged and/or confidential. If you are not
the intended recipient, please notify the sender immediately by reply and
immediately delete this message and all its attachments without making any
copies or distributions thereof. Any review, use, reproduction, disclosure or
dissemination of this message or any attachment by an unintended recipient is
strictly prohibited and may violate copyrights and/or other laws. Neither the 
sender, his or her employer nor any of their respective affiliates makes any 
warranties as to the completeness or accuracy of any of the information 
contained herein or that this message or any of its attachments is free of
viruses.
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
https://lists.immunitysec.com/mailman/listinfo/dailydave

Current thread: