Security Incidents mailing list archives

Re: unusual packet (tcpdump shows): rad-#0 41 [id 0] Attr[


From: "James Williams" <jwilliams () mail wtamu edu>
Date: Tue, 22 Oct 2002 10:51:08 -0500

Your server is infected with the Slapper Worm. What you need to do is
contact your ISP and ask them to block udp/1812 at the router coming into
their network and you need to recompile apache from source with the latest
packages since red hat or what ever distribution you are using isn't
patching their compilations of their packages correctly.

James Williams
Network Systems Technician
West Texas A&M University
http://www.wtamu.edu
Phone: (806) 651-2162
Email: jwilliams () mail wtamu edu


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: