Full Disclosure mailing list archives
Re: DCOM Worm released
From: <ragdelaed () catholic org>
Date: Mon, 11 Aug 2003 21:34:54 -0000 (GMT)
this is a practice worm. this aint the real thing. act like this one is really bad and treat your network like it's the real worm that should be here in a couple of days. i agree, random ip, tftp slow, this thing is inefficient. someone out there is working on the efficient one. use this as your dry run.
They found a worm, but since it uses tftp servers that can be taken down and since tftp is slow, it shouldnt have much of an effect. "Scans sequentially for machines with open port 135, starting at a presumably random IP address" - very stupid way to spread! http://isc.sans.org/diary.html?date=2003-08-11 __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
----------------------------------------- This email was sent using FREE Catholic Online Webmail. http://webmail.catholic.org/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: DCOM, (continued)
- Re: DCOM DBX @HOME (Aug 11)
- DCOM Paul Marsh (Aug 11)
- DCOM Worm released Joey (Aug 11)
- Re: DCOM Worm released Dennis Opacki (Aug 11)
- Re: DCOM Worm released Dennis Opacki (Aug 11)
- Re: DCOM Worm released Jordan Wiens (Aug 11)
- RE: DCOM Worm released Marc Maiffret (Aug 11)
- Re: DCOM Worm released daniel uriah clemens (Aug 11)
- RE: DCOM Worm released gml (Aug 11)
- DCOM Worm released Joey (Aug 11)
- Re: DCOM Worm released Nils (Aug 11)
- Re: DCOM Worm released ragdelaed (Aug 11)
- Re: DCOM Joey (Aug 11)
- Re: DCOM Valdis . Kletnieks (Aug 13)
- RE: DCOM Mike (Aug 12)