Re: Sasser Worm exploiting MS04-011 vulnerabilities

Article View: be.comp.security

Article #935

#935

From: s|b
Date: Sun, 02 May 2004 11:44

15 lines
1585 bytes

On Sat, 01 May 2004 18:19:12 GMT, Filbert wrote:

> Ik zie momenteel reeds verschillende probes per minuut op TCP/445 van
> besmette machines.

Op TCP/445 en TCP/9996 is hier voorlopig niets te zien, maar ik krijg
ik wel heel wat (= minstens 1 per minuut) pogingen te zien op
TCP/2886.

Wat Sasser betreft, Microsoft heeft gisteren ook nog een pagina online
gezet: <http://www.microsoft.com/security/incident/sasser.asp>

-- 
Ik usenet, dus ik ben.
<http://www.briachons.org/>

Technical Details

Message-ID: <d6n9905lov6djfe3p5l3o6ctvumlhfg5f2@4ax.com>

Path:

arc1-ca.pugleaf.net!controlnews3.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!newsfeed.wirehub.nl!newshub3.home.nl!home.nl!news.cambrium.nl!news.cambrium.nl!ecngs!feeder.ecngs.de!feed1.news.be.easynet.net!ossa.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail

References: <10033547.yWgGLQC1Ax@127.0.0.1>

Show Full Headers

Complete Article Headers

X-Google-Language: DUTCH,ASCII-7-bit
X-Google-Thread: 113446,bf061752b2fb928f
X-Google-Attributes: gid113446,public
Path: arc1-ca.pugleaf.net!controlnews3.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!newsfeed.wirehub.nl!newshub3.home.nl!home.nl!news.cambrium.nl!news.cambrium.nl!ecngs!feeder.ecngs.de!feed1.news.be.easynet.net!ossa.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail
From: "s|b" <me@privacy.invalid>
Newsgroups: be.comp.security
Subject: Re: Sasser Worm exploiting MS04-011 vulnerabilities
Organization: XXII
Reply-To: sb.nospam@belgacom.net
Message-ID: <d6n9905lov6djfe3p5l3o6ctvumlhfg5f2@4ax.com>
References: <10033547.yWgGLQC1Ax@127.0.0.1>
X-Newsreader: Forte Agent 2.0/32.652
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 15
Date: Sun, 02 May 2004 11:44:00 GMT
NNTP-Posting-Host: 213.118.155.59
X-Complaints-To: abuse@telenet.be
X-Trace: phobos.telenet-ops.be 1083498240 213.118.155.59 (Sun, 02 May 2004 13:44:00 MEST)
NNTP-Posting-Date: Sun, 02 May 2004 13:44:00 MEST

Reply to Parent Message