Sasser Worm exploiting MS04-011 vulnerabilities

Article View: be.comp.security

Article #933

#933

From: Filbert
Date: Sat, 01 May 2004 18:19

10 lines
1244 bytes

http://secunia.com/virus_information/9142/sasser/
http://www.sophos.com/virusinfo/articles/sasser.html

Ik zie momenteel reeds verschillende probes per minuut op TCP/445 van
besmette machines.


-- 
echo "+++ATH0filb@+++ATH0linuxmail.org" | sed 's/+++ATH0//g'
 "Entropy just isn't what it used to be."

Technical Details

Message-ID: <10033547.yWgGLQC1Ax@127.0.0.1>

Path:

arc1-ca.pugleaf.net!controlnews3.google.com!news1.google.com!news.glorb.com!ecngs!feeder.ecngs.de!feed1.news.be.easynet.net!ossa.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 113446,bf061752b2fb928f,start
X-Google-Attributes: gid113446,public
Path: arc1-ca.pugleaf.net!controlnews3.google.com!news1.google.com!news.glorb.com!ecngs!feeder.ecngs.de!feed1.news.be.easynet.net!ossa.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail
Message-ID: <10033547.yWgGLQC1Ax@127.0.0.1>
From: Filbert <filbert@spam.la>
Subject: Sasser Worm exploiting MS04-011 vulnerabilities
Newsgroups: be.comp.security
Reply-To: +++ATH0filb@+++ATH0linuxmail.org
Lines: 10
Organization: .
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7Bit
X-No-Archive: yes
X-Newsreader: nc [v1.10]
Date: Sat, 01 May 2004 18:19:12 GMT
NNTP-Posting-Host: 213.224.229.240
X-Complaints-To: abuse@telenet.be
X-Trace: phobos.telenet-ops.be 1083435552 213.224.229.240 (Sat, 01 May 2004 20:19:12 MEST)
NNTP-Posting-Date: Sat, 01 May 2004 20:19:12 MEST