Full Disclosure mailing list archives
Re: New variant of Nachi ?
From: Helmut Springer <delta () faveve uni-stuttgart de>
Date: Wed, 29 Oct 2003 08:58:53 +0100
Hi, On 29 Oct 2003 at 12:54 +0100, KF wrote:
https://gtoc.iss.net/issEn/delivery/gtoc/index.jsp hreat Forecast Our analysts are aware of a worm actively exploiting flaws addressed under Microsoft Security Bulletin MS03-026 and MS03-039. This worm activity is consistent with a variation of the Nachi or LovSan worms. Once a host is infected, it will attempt to propagate outbound via port 445.
Has anyone seen any evidence besides this and the two postings on public lists? No real trace after more than 24h it seems... -- MfG/Best Regards, "If we keep our pride... helmut springer Though paradise is lost We will pay the price, But we will not count the cost." _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- New variant of Nachi ? Awan, Farrukh (OCTO) (Oct 28)
- Re: New variant of Nachi ? KF (Oct 28)
- Re: New variant of Nachi ? Helmut Springer (Oct 29)
- Re: New variant of Nachi ? Florian Weimer (Oct 29)
- Re: New variant of Nachi ? Helmut Springer (Oct 29)
- <Possible follow-ups>
- RE: New variant of Nachi ? Discini, Sonny (Oct 29)
- Re: New variant of Nachi ? Valdis . Kletnieks (Oct 29)
- Re: New variant of Nachi ? KF (Oct 28)