Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included)
From: Dude VanWinkle <dudevanwinkle () gmail com>
Date: Fri, 27 Jan 2006 19:45:47 -0500

On 1/27/06, Charles Cala <charles_cala () yahoo com> wrote:
BlackWorm has a LAN infection vector.

So does some kid hacking directly into your box, but he isnt a worm

No action on the part of the user of the
box on the LAN must happen for them to "get got",
thus this is a worm.

Yes there is, read the fsecure write up. They have to have admin
rights to their neighbors machine or the NFS vector, where they still
have to click on the replaced..

you know what, it doesnt really matter. This "worm" will be gone in 7
days, so lets just agree that you are right and I am dead wrong.

Sorry all, didnt meant to make noise. its a worm, just like MyDoom

"That guy is a moron"
-F. Gump (speaking on JP's character)
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]