Security Incidents: Re: TCP port 5000 syn increasing

[Andreas <andreas () conectiva com br>]

On Tue, May 18, 2004 at 05:30:43PM -0400, Valdis.Kletnieks () vt edu wrote:
> I'm waiting for the first worm that tunnels over HTTP port 80, as a number
> of protocols already do, to get around firewalls that only pass 25 and 80. ;)
It would have to be "de-tunneled" on the inside to do something useful. Either
the network is already compromised, or it exploits something on that specific
service.


---------------------------------------------------------------------------
Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
wireless security

Protect your network against hackers, viruses, spam and other risks with Astaro
Security Linux, the comprehensive security solution that combines six
applications in one software solution for ease of use and lower total cost of
ownership.

Download your free trial at
http://www.securityfocus.com/sponsor/Astaro_incidents_040517
----------------------------------------------------------------------------