Full Disclosure mailing list archives
Re: Pinging... And lots of it..
From: Paul Schmehl <pauls () utdallas edu>
Date: Thu, 21 Aug 2003 20:34:27 -0500
--On Thursday, August 21, 2003 19:33:06 -0400 Calvyn <Calvyn () stny rr com> wrote:
Hey people, At around 3:30 today my campus lite up like a Christmas tree. I have hundreds of computers pinging each other all over campus. Luckily none of them are from the subnet that I administer. :) I did some searchin but didn't read about any of the new worms using ICMP. Anyone have any ideas?
You've got Nachi. The third variant of the RPC DCOM worm. See any AV vendor's webpage for details, but you've got fun ahead of you for sure.
Paul Schmehl (pauls () utdallas edu) Adjunct Information Security Officer The University of Texas at Dallas AVIEN Founding Member http://www.utdallas.edu _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Idea D B (Aug 21)
- <Possible follow-ups>
- RE: Idea Joshua Thomas (Aug 21)
- RE: Idea Steven Alexander (Aug 21)
- Pinging... And lots of it.. Calvyn (Aug 21)
- Re: Pinging... And lots of it.. Paul Schmehl (Aug 21)
- RE: Pinging... And lots of it.. ViLLaN (Aug 21)
- Pinging... And lots of it.. Calvyn (Aug 21)
- RE: Idea Schmehl, Paul L (Aug 21)