Full Disclosure mailing list archives

Re: DCOM RPC exploit (dcom.c)


From: Knud Erik Højgaard <kain () ircop dk>
Date: Wed, 30 Jul 2003 02:13:37 +0200

Peter Kruse wrote:

FYI, Incidents.org reports: "Widespread scans for unpatched Windows
machines underway (RPC vulnerability). Patch systems and block ports
135-139 & 445".

This might be caused by several tools in the hands of kiddies probing
IP´s for vulnerable systems. This could also be caused by a worm
making it´s first round crashing and exploiting boxes. I guess time
will tell.

when it strikes, it won't be silent.

BTW - nothing here, it´s all quite around my firewalls.

quiets? wait and see.

--
kokasviiijn

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: