Security Incidents mailing list archives

Re: Linux Slapper Worm and Linksys


From: "Johannes Ullrich" <jullrich () euclidian com>
Date: Thu, 19 Sep 2002 11:51:47 -0400

James Williams" <jwilliams () mail wtamu edu> wrote:

Has anybody heard of or seen the Slapper worm DoS a Linksys SOHO router
out of commission? A co-worker whose machine had been infected over the
weekend had his linksys router die over the same period that his box had
been infected with the worm. I know that Nimda had a similar affect on
the Cisco 67x Series ADSL routers running a certain firmware revision and
I was wondering if the Slapper had a similar affect with the Linksys SOHO
routers.

The slapper worm can generate a lot of udp traffic while chatting
with its peers. This could just clock the line or overload one
of the smaller routers.


-- 
--------------------------------------------------------------------
jullrich () euclidian com             Collaborative Intrusion Detection
                                         join http://www.dshield.org

Attachment: _bin
Description:


Current thread: