Security Incidents mailing list archives
Re: nimda subject line
From: Thomas Roessler <roessler () does-not-exist org>
Date: Thu, 20 Sep 2001 10:44:07 +0200
On 2001-09-20 10:38:09 +0200, Thomas Roessler wrote:
The payload was the same one you see everywhere else, with the usual four-byte variation.
I have to correct the latter part: There is at least one more variation in the worm code than the four-byte sequence I mentioned.
-- Thomas Roessler http://log.does-not-exist.org/ ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service.For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- nimda subject line Thomas Roessler (Sep 20)
- Re: nimda subject line Thomas Roessler (Sep 20)
- <Possible follow-ups>
- Re: nimda subject line Eric Chien (Sep 21)