Potentially Nasty Worm

Did you patch last Tuesday? Everything? If not beware:


 


New worm using a fresh exploit found – http://www.f-secure.com/weblog.


 


This worm replicates by scanning random machines at port 445/TCP” Which is good, because we block that port, but what about non-fire walled machines and laptop that got infected while not on our network?“


 


ISC information:
http://isc.sans.org/diary.php?date=2005-08-14


 


FrSIRT information:


http://www.frsirt.com/english/advisories/20050814.ZotobA.php

Leave a Reply

Your email address will not be published. Required fields are marked *