Recent UPnP worm writers caught...

Recent UPnP worm writers caught...

Secure Home | Search | About
 Computer Software Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Recent UPnP worm writers caught... Imhotep 08-27-2005
Posted by Imhotep on August 27, 2005, 3:32 am
If you were  Registered and logged in, you could reply and use other advanced thread options
http://money.cnn.com/2005/08/26/technology/worm_arrest/index.htm?cnn=yes


Posted by David H. Lipman on August 27, 2005, 2:02 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| http://money.cnn.com/2005/08/26/technology/worm_arrest/index.htm?cnn=yes

NO....

That's the Plug 'n Play buffer offer flow vulnerability (KB899588), most notable
in Win2K,
and is not a Universal Plug 'n Play (uPnP) problem. The Zotob used TCP port 445
as the
protocol infection vector and UPnP uses TCP 5000.

http://www.microsoft.com/technet/security/bulletin/ms05-039.mspx

W32/Zotob.worm -- http://vil.nai.com/vil/content/v_135433.htm

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm




Posted by David H. Lipman on August 27, 2005, 2:02 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


That should have been...
"...buffer overflow vulnerability..."

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm




Posted by Imhotep on August 27, 2005, 5:48 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
David H. Lipman wrote:

>
>
> That should have been...
> "...buffer overflow vulnerability..."
>

Ya, there are so many vulnerabilities in there products now-a-days I forget
which service has which vulnerability....it is tough to keep track....




Posted by David H. Lipman on August 27, 2005, 8:16 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


| Ya, there are so many vulnerabilities in there products now-a-days I forget
| which service has which vulnerability....it is tough to keep track....
|

One still has to.... ;-)

One has to understand the underlying vulnerability and what exploits it. Its
remembering
the MS KB number and associated patch that's the hard part.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm




Similar ThreadsPosted
Re: Security Experts Warn of Kama Sutra Worm (yet another MS worm) January 27, 2006, 3:33 pm
Re: Security Experts Warn of Kama Sutra Worm (yet another MS worm) January 28, 2006, 6:57 pm
Re: Security Experts Warn of Kama Sutra Worm (yet another MS worm) January 30, 2006, 8:53 am
Software writers spot open source in Sony BMG CDs November 20, 2005, 4:00 pm
India Call Center Employee Caught Selling Credit Card Info June 23, 2005, 3:35 pm
Deleting recent documents from the start menu in XP November 13, 2005, 9:55 am
Recent word exploit also causes problems in OpenOffice December 21, 2006, 3:59 pm
Polyglot IM worm targets MSN August 30, 2005, 6:22 am
Name that worm--plan looks to cut through chaos September 25, 2005, 12:28 am
MS Zotob A worm starting to spread... August 16, 2005, 6:25 pm

The site map in XML format XML site map

Contact Us | Privacy Policy