Re: [sean () donelan com: Symantec detected Slammer worm "hours" before]

["Rick Updegrove \(security\)" <security () updegrove net>]

----- Original Message -----
From: "Len Rose" <len () netsys com>
To: <full-disclosure () lists netsys com>
Sent: Thursday, February 13, 2003 9:48 AM
Subject: [Full-disclosure] [sean () donelan com: Symantec detected Slammer worm
"hours" before]


> Wow, Symantec is making an amazing claim.  They were able to detect
> the slammer worm "hours" before.  Did anyone receive early alerts from
> Symantec about the SQL slammer worm hours earlier?

The first I heard of SQ_Hell (The first name given it by Geoff Shively of
http://www.pivx.com) was dated Jan 25 2003 7:11AM here:

http://online.securityfocus.com/archive/1/308306/2003-01-24/2003-01-30/2

I don't use symantec products so I wouldn't have gotten any notice from
them.  Someone else will have to verify that their notices went out before
Michael Bacarella's post.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html