Full Disclosure mailing list archives

DCOM Worm released

From: Joey <joey2cool () yahoo com>
Date: Mon, 11 Aug 2003 13:21:14 -0700 (PDT)

They found a worm, but since it uses tftp servers that
can be taken down and since tftp is slow, it shouldnt
have much of an effect.

"Scans sequentially for machines with open port 135,
starting at a presumably random IP address" - very
stupid way to spread!

http://isc.sans.org/diary.html?date=2003-08-11

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

DCOM Paul Marsh (Aug 11)
- AW: DCOM Roman Doerr (Aug 11)
  - Re: DCOM /m (Aug 11)
    - Re: DCOM gregh (Aug 12)
- RE: DCOM Jason Coombs (Aug 11)
- Re: DCOM DBX @HOME (Aug 11)
- <Possible follow-ups>
- DCOM Paul Marsh (Aug 11)
  - DCOM Worm released Joey (Aug 11)
    - Re: DCOM Worm released Dennis Opacki (Aug 11)
    - Re: DCOM Worm released Dennis Opacki (Aug 11)
    - Re: DCOM Worm released Jordan Wiens (Aug 11)
    - RE: DCOM Worm released Marc Maiffret (Aug 11)
    - Re: DCOM Worm released daniel uriah clemens (Aug 11)
    - RE: DCOM Worm released gml (Aug 11)
    - Re: DCOM Worm released Nils (Aug 11)
    - Re: DCOM Worm released ragdelaed (Aug 11)
  - Re: DCOM Joey (Aug 11)
    - Re: DCOM Valdis . Kletnieks (Aug 13)

(Thread continues...)