full-disclosure - New variant of Nachi ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <55B3FA88F3E9384CA28AA0471794213536698B@sojsdc001.dc.gov>
From: Farrukh.Awan at dc.gov (Awan, Farrukh (OCTO))
Subject: New variant of Nachi ?

Has any body detected a new variant of the Nachi worm infecting machines not
patched with MS03-039. I couldn't find any details on it propagation except
once a host is infected, it attempts to propagate via SMB over TCP (port
445). Any details on exploit code /payload...

Best Regards;

Farrukh Awan

(202) -727-8856 (Office)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20031028/cf3e3189/attachment.html