RE: /sumthin Revisited

From: Jonathan A. Zdziarski <jonathan(at)networkdweebs.com>
Date: Tue Jan 07 2003 - 17:31:49 EST

I typed in the IP address of the machine that scanned one of my machines for /sumthin and it turned out to be another web server for 'Jang Cyuang Enterise Co., LTD.'. I emailed them asking if they had a tool that performs these scans, waiting for a reply. This could very well be a new worm looking for vulnerable hosts, and if it is, this company's web server is apache 1.3.12, so it may be an old vulnerability.

> -----Original Message-----

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Tue Jan 7 18:36:40 2003