Article View: demon.announce
Article #86Recent Internet Worm Issues
From: Malcolm S. Muir
Date: Tue, 19 Aug 2003 16:36
Date: Tue, 19 Aug 2003 16:36
63 lines
3194 bytes
3194 bytes
-----BEGIN PGP SIGNED MESSAGE----- Many customers will be aware of the recent appearance of two Internet worms commonly being referred to as 'blaster' and 'welchia'. Both of these target a known vulnerability in Microsoft Windows. Details of the worms can be found at: http://www.cert.org/advisories/CA-2003-20.html and http://www.cert.org/current/current_activity.html#welchia [The latter URL is liable to change] Details of the vulnerability in Microsoft Windows can be found here: http://www.microsoft.com/security/security_bulletins/ms03-026.asp The effect of these two worms has been a significant increase in Internet traffic targeting vulnerable systems. Of greatest concern is the ICMP traffic created by the Welchia worm which by its nature is causing problems with routers across the Internet worldwide. As a result we are now blocking traffic associated with the worm (ICMP 8 - Echo) at our borders to prevent this traffic disrupting our equipment and services. This blocking will be reviewed over the coming days and removed as soon as we believe we can do so without causing adverse impact on our customers and services. We would also recommend that all customers check that they keep their copies of Microsoft Windows up to date with the Windows Update site: http://windowsupdate.microsoft.com and also that they install and maintain an up to date anti-virus package on their system. Such packages are available from the usual sources, or we can supply one, details of which are available at: http://www.demon.net/products/security/online/ Malcolm Muir Demon Internet - -- Malcolm S. Muir Demon Internet Ltd. Sunderland 322 Regents Park Road England London N3 2QQ -----BEGIN PGP SIGNATURE----- Version: PGPsdk version 1.7.1 iQCVAwUBP0JSD8UeMni8Zor9AQE5owP+MZJg2WoBmrgcQJC4COLIMrK0rAE+q9fR OBdaEiA42Z4UX07oIbqxoS0j9G2C1JYNaUZeIQk1UAH6xB+tv5XmrSE+Er50TS92 ij6u70Pk6Uy4C94WmD5Xs1XA+lTLxfkkAT9MibdVmFd30OiN7GZtK0Ncclgnur+3 CuviRK9io70= =IZd9 -----END PGP SIGNATURE-----
Technical Details
Message-ID:
<mr5qnXAPIlQ$EwTn@demon.net>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-03!sn-xit-01!sn-xit-09!supernews.com!diablo.theplanet.net!kibo.news.demon.net!news.demon.co.uk!demon!demon.net!MalcolmShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 112c0c,bde543ce059ce95,start X-Google-Attributes: gid112c0c,public X-Google-ArrivalTime: 2003-08-19 09:44:03 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-03!sn-xit-01!sn-xit-09!supernews.com!diablo.theplanet.net!kibo.news.demon.net!news.demon.co.uk!demon!demon.net!Malcolm From: "Malcolm S. Muir" <Malcolm@demon.net> Newsgroups: demon.announce Subject: Recent Internet Worm Issues Followup-To: demon.service Date: Tue, 19 Aug 2003 17:36:31 +0100 Organization: Demon Internet Ltd. Lines: 63 Approved: malcolm@demon.net Message-ID: <mr5qnXAPIlQ$EwTn@demon.net> Reply-To: helpdesk@demon.net NNTP-Posting-Host: muir-et4.staff.demon.net Mime-Version: 1.0 X-Trace: news.demon.co.uk 1061311384 16093 194.159.240.5 (19 Aug 2003 16:43:04 GMT) X-Complaints-To: abuse@demon.net NNTP-Posting-Date: Tue, 19 Aug 2003 16:43:04 +0000 (UTC) X-Newsreader: Turnpike Integrated Version 5.01 U <bS3grvfX$o+p8Jofc680ZqzcmN>