[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <00ad01c439bb$f4d2f4b0$a900a8c0@cybergeneration.com>
From: mducharme at cybergeneration.com (Maxime Ducharme)
Subject: Worm of the worm?
Hi
K-OTik published an exploit for sasser's ftpd :
http://www.k-otik.com/exploits/05102004.sasserftpd.c.php
Maybe you are seeing manual scans or a brand new worm.
Have a nice day
Maxime Ducharme
Programmeur / Sp?cialiste en s?curit? r?seau
----- Original Message -----
From: "Roberto Navarro - TusProfesionales.es" <rnavarro@...profesionales.es>
To: <full-disclosure@...ts.netsys.com>
Sent: Friday, May 14, 2004 8:26 AM
Subject: [Full-Disclosure] Worm of the worm?
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I have detected some scans lookin' for the 5554 port (sasser's ftpd).
>
> Does somebody know anything about a new worm, exploiting its
> vulnerabilty?
>
>
> Roberto a.k.a. Logan
>
>
> There are no answers, only cross refernces.
> -- Weiner's Law of Libraries
>
> - ---------------------------------------
> Roberto Navarro
> rnavarro@...profesionales.es
> Registered Linux User #212565
> - ---------------------------------------
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP 8.0.2
>
> iQA/AwUBQKS63MhDftHeZF7JEQLl/ACfU2fksblzy3zYh4yelCH2GxATsqcAoM+F
> S/UxvCt8U0dgVqP3E+TeunS2
> =sEU4
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>
Powered by blists - more mailing lists