lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
From: isec at europe.com (Willem Koenings)
Subject: agobot and 1025

hi all,

in range of latest agobot's scans is port 1025. i know that
by default there sits mstask and over rpc you can talk to
him, add scheduled jobs etc (done this). sniffer captures
reveals, that port 1025 attempts significantly resembles
135 DCOM/blaster attempts.

can anyone point out what and how _specifically_ are exploited
in port 1025?

W.
-- 
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm


Powered by blists - more mailing lists