Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

Re: DCOM RPC exploit as a virus/trojan?

From: <matthew.barrow(at)sophos.com>
Date: Fri Aug 01 2003 - 11:09:57 EDT

Can I make an addition to that comment...

McAffee detect an application that utilises this exploit with the alais 'Exploit-DcomRpc trojan'.

Sophos have a sample in the lab.


On 01/08/2003 16:02:43 Matthew Barrow wrote:

>I have a c/mer at work who claims to have an application that exploits the
RPC
>vulnerability. I am awaiting a sample.
>
>On 01/08/2003 00:58:26 "A. Bluecoat" wrote:
>
>>Just wondering, a newbie question really; theoretically, could the
Microsoft
>>RPC exploit be scripted to work in virus or trojan form?

>>Your network firewall and IDS products do not prevent Web application

>>
>
>--
>Matthew Barrow, Technical Support Assistant, Sophos Anti-Virus
>Email: support@sophos.com, Tel: 01235 559933, Web: www.sophos.com
>Add live virus info to your website: http://www.sophos.com/link/vfeed

--
Matthew Barrow, Technical Support Assistant, Sophos Anti-Virus
Email: support@sophos.com, Tel: 01235 559933, Web: www.sophos.com
Add live virus info to your website: 
http://www.sophos.com/link/vfeed



---------------------------------------------------------------------------
Your network firewall and IDS products do not prevent Web application 
attacks - the most common form of online exploitation- resulting in Web 
defacement, data theft, sabotage and fraud.
KaVaDo is the only company that provides a complete suite of Web 
application security products.
Download a FREE whitepaper on "Security Policy Automation for Web
Applications":
http://www.securityfocus.com/Kavado-focus-ms
---------------------------------------------------------------------------
Received on Fri Aug 1 11:45:32 2003
Do you need help?X

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:01:34 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library