Security Incidents: RE: new pop3 exploit out?

["leon" <leon () inyc com>]

I don't believe that.  They still need your screen name to exploit any
of the vulnerabilities associated with that.  Probing port 5190 does not
reveal any of that information.

Cheers,

Leon

-----Original Message-----
From: Valdis.Kletnieks () vt edu [mailto:Valdis.Kletnieks () vt edu] 
Sent: Friday, October 05, 2001 8:19 PM
To: leon
Cc: incidents () securityfocus com
Subject: Re: new pop3 exploit out? 

On Fri, 05 Oct 2001 16:03:09 EDT, leon <leon () inyc com>  said:
> I keep getting scanned on various ports (the usual 80, 23, 5190? I
know
> it is aim but not sure why people are looking for it) upon scanning
the

They're looking for AIM because a buffer overflow was found earlier this
week.

-- 
                                Valdis Kletnieks
                                Operating Systems Analyst
                                Virginia Tech



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com