Full Disclosure mailing list archives

New variant of Nachi ?

From: "Awan, Farrukh (OCTO)" <Farrukh.Awan () dc gov>
Date: Tue, 28 Oct 2003 08:14:29 -0500

Has any body detected a new variant of the Nachi worm infecting machines not
patched with MS03-039. I couldn't find any details on it propagation except
once a host is infected, it attempts to propagate via SMB over TCP (port
445). Any details on exploit code /payload...



 
Best Regards;
 
Farrukh Awan

(202) -727-8856 (Office)

Current thread:

New variant of Nachi ? Awan, Farrukh (OCTO) (Oct 28)
- Re: New variant of Nachi ? KF (Oct 28)
  - Re: New variant of Nachi ? Helmut Springer (Oct 29)
    - Re: New variant of Nachi ? Florian Weimer (Oct 29)
- <Possible follow-ups>
- RE: New variant of Nachi ? Discini, Sonny (Oct 29)
  - Re: New variant of Nachi ? Valdis . Kletnieks (Oct 29)