Home page logo
/

nanog logo nanog mailing list archives

Re: Solaris/IIS worm hits 9000 boxes in 48 hours
From: Ian Cooper <icooper () equinix com>
Date: Fri, 11 May 2001 13:25:43 -0700


At 16:14 5/11/2001 -0400, Petri Stephen wrote:

http://www.theregister.co.uk/content/6/18882.html

......The quite reliable hacker tracker attrition.org is reporting that
nearly nine thousand machines had been auto-defaced by the sadmind/IIS worm
as of Tuesday, making it one of the most effective little scripts ever
loosed on the Net.......

Quite.  However, since this is NANOG you missed the most interesting parts:

"Attrition has posted the IPs of all the boxes known to have been hit..."

"What's ironic here is that the worm exploits two separate holes which were reported and patched ages ago. Call it proof-of-concept that sysadmins spend an awful lot of time on activities other than absorbing security bulletins."



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]