Home page logo

nanog logo nanog mailing list archives

Re: Worm?
From: "Rubens Kuhl Jr." <rubensk () gmail com>
Date: Sat, 14 Jan 2006 14:55:39 -0200

See story below from isc.sans.org (now on cover page, article on



TippingPoint IPS DoS (High CPU load) (NEW)
Published: 2006-01-14,
Last Updated: 2006-01-14 05:57:28 UTC by Swa Frantzen (Version:
3(click to highlight changes))

We are getting multiple reports of a DoS attack (causing high CPU load
that prevents normal use) against TippingPoint IPS devices.

We got a call from TippingPoint, stating that in their opinion this is
not a "DoS", but a "high load" issue.

For more details we'd like to urge customers to contact TippingPoint
directly. They are working on a patch and advisory which should be
available shortly.

Edit: We've received a report that TippingPoint has now released a
patch for this issue.  The patch version is TOS

Swa Frantzen

On 1/13/06, Byrne, David <David.Byrne () echostar com> wrote:

Anyone know about a new worm going around? Our IPS vendor says that they
have a number of customers affected by traffic volume, but I don't know any


David Byrne

Corporate IT Security

EchoStar Satellite L.L.C.


david.byrne () echostar com

  By Date           By Thread  

Current thread:
  • Worm? Byrne, David (Jan 13)
    • Re: Worm? Rubens Kuhl Jr. (Jan 14)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]