Mailing List Archive For incidents@securityfocus.com Aug 2003 By Author

• Adcock, Matt
  • RE: msblast.exe --> DDoS against windowsupdate.com (research) (Wed Aug 13 2003 - 22:40:47 EDT)
  • RE: Suspicious firewall logs (Fri Aug 01 2003 - 14:27:29 EDT)
• Alan B. Clegg
  • Re: Blasting Blaster.Worm (aka LovSan Virus) (Wed Aug 13 2003 - 07:25:55 EDT)
• alaric(at)alaricsecurity.com
  • Re: msblast.exe available (Wed Aug 13 2003 - 09:21:42 EDT)
• Alavan
  • Blasting Blaster.Worm (aka LovSan Virus) (Tue Aug 12 2003 - 15:40:43 EDT)
• Alex 'CAVE' Cernat
  • Re: WORM_MIMAIL.A Anyone have any info on what this does yet? (Mon Aug 04 2003 - 11:57:06 EDT)
• Alon Tirosh
  • FW: rpc dcom worm and windowsupdate (Wed Aug 13 2003 - 11:00:57 EDT)
  • RE: MSBlast and other known exploits.. (Wed Aug 13 2003 - 11:07:18 EDT)
• Anderson Johnston
  • Re: [unisog] Heads up! distributed scans and attacks targeting nsiss.dll (Fri Aug 08 2003 - 15:16:57 EDT)
• Andrew Thomas
  • RE: DCOM worm analysis report: W32.Blaster.Worm (Tue Aug 12 2003 - 04:11:03 EDT)
• Andy Cuff [talisker]
  • Re: Secure.dcom.exe (Thu Aug 07 2003 - 07:39:33 EDT)
• Anthony Clendenen
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Fri Aug 01 2003 - 16:05:17 EDT)
• att13543
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Tue Aug 05 2003 - 13:26:23 EDT)
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Mon Aug 04 2003 - 09:53:53 EDT)
• Barry Fitzgerald
  • Re: RPC DCOM exploit (Mon Aug 04 2003 - 10:58:11 EDT)
  • Re: RPC DCOM exploit (Fri Aug 01 2003 - 12:51:21 EDT)
• Ben Timby
  • Re: Suspicious firewall logs (Fri Aug 01 2003 - 14:06:02 EDT)
• Bojan Zdrnja
  • RE: Dig in: autorooter, maybe that IRC one but SAV doesnt pick it up. (Sun Aug 10 2003 - 17:34:19 EDT)
• Brad Pryce
  • Re: msblast.exe --> DDoS against windowsupdate.com (research) (Wed Aug 13 2003 - 21:25:38 EDT)
  • Re: Blaster Variant - W32.Blaster.B.Worm (Wed Aug 13 2003 - 21:28:37 EDT)
• Brian Eckman
  • Re: DCOM95 for Windows 95 (Fri Aug 08 2003 - 15:28:54 EDT)
• Bruce Martins
  • RE: Blaster Variant - W32.Blaster.B.Worm (Thu Aug 14 2003 - 07:29:36 EDT)
  • RE: MSBLASTER Infecting despite 03-026 patch? (Wed Aug 13 2003 - 09:09:37 EDT)
• Butterworth, James J. EWC (C3F J39)
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Fri Aug 01 2003 - 19:42:30 EDT)
• Carter, Mike
  • RE: MSBLASTER Infecting despite 03-026 patch? (Tue Aug 12 2003 - 01:35:11 EDT)
• Charles Hamby
  • RE: MSBLASTER Infecting despite 03-026 patch? (Tue Aug 12 2003 - 22:32:13 EDT)
  • MSBLASTER Infecting despite 03-026 patch? (Tue Aug 12 2003 - 01:12:53 EDT)
• Chris Barber
  • RE: rpc dcom worm and windowsupdate (Wed Aug 13 2003 - 11:24:25 EDT)
• Chris McNab
  • msblast.exe available (Mon Aug 11 2003 - 18:47:04 EDT)
• Chris Shepherd
  • Re: Scan of TCP 552-554 (Fri Aug 01 2003 - 13:41:20 EDT)
  • Re: Scan of TCP 552-554 (Fri Aug 01 2003 - 08:25:08 EDT)
• Christine Kronberg
  • Re: Dig in: autorooter, maybe that IRC one but SAV doesnt pick it up. (Wed Aug 06 2003 - 12:06:55 EDT)
• Christopher Lyon
  • RE: msblast.exe --> DDoS against windowsupdate.com (research) (Thu Aug 14 2003 - 02:57:44 EDT)
  • RE: MSBLASTER Infecting despite 03-026 patch? (Tue Aug 12 2003 - 04:10:43 EDT)
• Christopher X. Candreva
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Fri Aug 01 2003 - 15:18:30 EDT)
• Chuck Milam
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Mon Aug 04 2003 - 11:46:31 EDT)
• Compton, Rich
  • RE: rpc dcom worm and windowsupdate (Wed Aug 13 2003 - 10:56:33 EDT)
• Curt Wilson
  • Stumbler: Reserved IP 73.247.223.148 scan source (Thu Aug 07 2003 - 17:51:23 EDT)
• Dan Glass
  • Re: Tools for monitoring port scans / connection attmempts? (Thu Aug 14 2003 - 08:14:35 EDT)
• Dan Hanson
  • MS03-026 Update Problems? (fwd) (Wed Aug 13 2003 - 19:53:57 EDT)
  • RE: MSBLASTER Infecting despite 03-026 patch? (Tue Aug 12 2003 - 01:39:22 EDT)
• Daniel Wittenberg
  • WORM_MIMAIL.A cleaner ? (Mon Aug 04 2003 - 13:11:47 EDT)
• Danny
  • WORM_MIMAIL.A Anyone have any info on what this does yet? (Fri Aug 01 2003 - 13:56:20 EDT)
• Dave Ahmad
  • DCOM worm analysis report: W32.Blaster.Worm (Mon Aug 11 2003 - 17:36:24 EDT)
• Dave Paris
  • Re: Scan of TCP 552-554 (Fri Aug 01 2003 - 22:02:35 EDT)
  • RE: Scan of TCP 552-554 (Fri Aug 01 2003 - 14:31:26 EDT)
• David Gillett
  • RE: msblast.exe worm FINDINGS (DDoS) ---> Can someone please confirm? (Thu Aug 14 2003 - 15:36:15 EDT)
• David Hawley, CISSP
  • Re: WORM_MIMAIL.A Anyone have any info on what this does yet? (Mon Aug 04 2003 - 16:44:43 EDT)
• David Moisan
  • Re: Pdmin / Trojaned csrss.exe (Mon Aug 04 2003 - 12:57:08 EDT)
• David Vincent
  • new msblaster on the loose? (Wed Aug 13 2003 - 13:23:23 EDT)
  • RE: Musical irc bot backdoor? (Wed Aug 06 2003 - 19:45:52 EDT)
• David.Pavone(at)apcc.com
  • RE: msblast.exe available (Tue Aug 12 2003 - 05:00:40 EDT)
• De Doncker, Steve
  • RE: Secure.dcom.exe (Wed Aug 06 2003 - 19:40:16 EDT)
  • RE: /tmp/pdk ? (Mon Aug 04 2003 - 11:37:23 EDT)
  • RE: Command Line RPC vulnerability scanner? (Fri Aug 01 2003 - 13:02:48 EDT)
• Dennis
  • Analysis/decompilation of main() of the msblast worm (Thu Aug 14 2003 - 16:47:05 EDT)
  • updated partial analysis of msblast.exe (Tue Aug 12 2003 - 08:08:43 EDT)
• Dick St.Peters
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Mon Aug 04 2003 - 14:14:17 EDT)
• Dowling, Gabrielle
  • RE: MSBLASTER Infecting despite 03-026 patch? (Wed Aug 13 2003 - 00:15:01 EDT)
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Sun Aug 03 2003 - 18:28:32 EDT)
• dr john halewood
  • Re: MSBlast and other known exploits.. (Wed Aug 13 2003 - 12:18:54 EDT)
• Drew Weaver
  • Dig in: autorooter, maybe that IRC one but SAV doesnt pick it up. (Tue Aug 05 2003 - 15:07:04 EDT)
• edelweiss
  • Re: Tools for monitoring port scans / connection attmempts? (Tue Aug 12 2003 - 21:27:22 EDT)
• enigmatech(at)ienigmatech.net
  • RE: MSBLASTER Infecting despite 03-026 patch? (Tue Aug 12 2003 - 01:50:49 EDT)
  • RE: MSBLASTER Infecting despite 03-026 patch? (Tue Aug 12 2003 - 01:47:21 EDT)
• Eric Appelboom
  • Musical irc bot backdoor? (Wed Aug 06 2003 - 12:08:45 EDT)
  • DCOM95 for Windows 95 (Mon Aug 04 2003 - 14:02:45 EDT)
• Eric Chien
  • Re: Secure.dcom.exe (Fri Aug 08 2003 - 04:24:28 EDT)
• Eric Hines
  • Blaster Worm Rebooting Patched Machines! (Wed Aug 13 2003 - 10:10:58 EDT)
  • RE: Blasting Blaster.Worm (aka LovSan Virus) (Tue Aug 12 2003 - 20:17:56 EDT)
  • Re: Secure.dcom.exe (Fri Aug 08 2003 - 08:17:46 EDT)
• Esler, Joel Contractor
  • RE: RPC DCOM exploit (Fri Aug 01 2003 - 14:40:41 EDT)
• Evans, Arian
  • RE: Blaster Worm Rebooting Patched Machines! (Wed Aug 13 2003 - 11:20:55 EDT)
• Flowers, Katie
  • RE: rpc dcom worm and windowsupdate (Wed Aug 13 2003 - 11:02:27 EDT)
• Frank Knobbe
  • Re: WORM_MIMAIL.A Anyone have any info on what this does yet? (Mon Aug 04 2003 - 13:24:52 EDT)
• gil.young(at)sycoleman.com
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Fri Aug 01 2003 - 17:11:44 EDT)
• GMHoward
  • FW: Secure.dcom.exe (Wed Aug 06 2003 - 19:30:26 EDT)
• Harlan Carvey
  • Re: MSBlast and other known exploits.. (Thu Aug 14 2003 - 18:51:44 EDT)
  • Re: Secure.dcom.exe (Thu Aug 07 2003 - 07:09:41 EDT)
• iDaemon Security
  • Re: Blasting Blaster.Worm (aka LovSan Virus) (Tue Aug 12 2003 - 22:30:52 EDT)
• IDS
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Sun Aug 03 2003 - 13:19:19 EDT)
• Incist
  • Re: port 445 probes continued (Fri Aug 08 2003 - 18:28:00 EDT)
• Ivan Coric
  • Re: Secure.dcom.exe (Thu Aug 07 2003 - 19:13:56 EDT)
  • Re: Secure.dcom.exe (Thu Aug 07 2003 - 19:06:57 EDT)
  • RE: Secure.dcom.exe (Wed Aug 06 2003 - 20:29:57 EDT)
  • Re: Secure.dcom.exe (Wed Aug 06 2003 - 19:24:34 EDT)
• James C. Slora Jr.
  • Re: New mail scanner? (Sun Aug 10 2003 - 22:41:32 EDT)
• James C. Slora, Jr.
  • RE: MSBLASTER Infecting despite 03-026 patch? (Thu Aug 14 2003 - 20:26:15 EDT)
  • RE: MSBlast and other known exploits.. (Wed Aug 13 2003 - 11:27:28 EDT)
  • RE: MSBLASTER Infecting despite 03-026 patch? (Tue Aug 12 2003 - 19:56:32 EDT)
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Tue Aug 05 2003 - 16:15:36 EDT)
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Mon Aug 04 2003 - 14:29:01 EDT)
• Jamie Pratt
  • Re: msblast.exe available (Wed Aug 13 2003 - 08:03:11 EDT)
• Jason Alexander
  • Re: Pdmin / Trojaned csrss.exe (Mon Aug 04 2003 - 16:43:43 EDT)
  • Re: Pdmin / Trojaned csrss.exe (Mon Aug 04 2003 - 12:30:28 EDT)
  • Pdmin / Trojaned csrss.exe (Sat Aug 02 2003 - 17:55:21 EDT)
• Javier Liendo
  • Re: Secure.dcom.exe (Wed Aug 06 2003 - 19:59:08 EDT)
• Jay Woody
  • Re: MSBlast and other known exploits.. (Thu Aug 14 2003 - 10:51:05 EDT)
  • Re: rpc dcom worm and windowsupdate (Wed Aug 13 2003 - 11:22:35 EDT)
  • RE: Command Line RPC vulnerability scanner? (Mon Aug 04 2003 - 12:08:42 EDT)
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Fri Aug 01 2003 - 14:53:42 EDT)
  • Re: WORM_MIMAIL.A Anyone have any info on what this does yet? (Fri Aug 01 2003 - 15:02:37 EDT)
• Jeff Kell
  • Re: New mail scanner? (Sun Aug 10 2003 - 22:57:05 EDT)
  • New mail scanner? (Sat Aug 09 2003 - 02:10:36 EDT)
• Jeremiah Cornelius
  • Re: MSBLASTER Infecting despite 03-026 patch? (Wed Aug 13 2003 - 12:23:54 EDT)
• Jerry Shenk
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Mon Aug 04 2003 - 13:25:51 EDT)
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Mon Aug 04 2003 - 11:42:52 EDT)
• Joe Blatz
  • RE: MSBLASTER Infecting despite 03-026 patch? (Thu Aug 14 2003 - 11:08:38 EDT)
• Joe Stewart
  • Re: Blaster Variant - W32.Blaster.B.Worm (Thu Aug 14 2003 - 15:18:08 EDT)
• John Ives
  • Re: MSBlast and other known exploits.. (Wed Aug 13 2003 - 11:27:37 EDT)
• Jonathan Bloomquist
  • RE: MSBLASTER Infecting despite 03-026 patch? (Wed Aug 13 2003 - 13:12:58 EDT)
• Jonathan Rickman
  • Re: MSBlast and other known exploits.. (Thu Aug 14 2003 - 20:48:07 EDT)
• Jordan Wiens
  • RE: MSBLASTER Infecting despite 03-026 patch? (Tue Aug 12 2003 - 10:36:09 EDT)
• Justin Pryzby
  • Re: Heads up! distributed scans and attacks targeting nsiss.dll (Sun Aug 10 2003 - 17:23:04 EDT)
• kevingeo(at)gmx.de
  • Re: WORM_MIMAIL.A Anyone have any info on what this does yet? (Wed Aug 06 2003 - 11:56:30 EDT)
• Kirt Cathey
  • RE: msblast.exe available (Tue Aug 12 2003 - 08:03:45 EDT)
• Larsen, Colin
  • RE: MSBLASTER Infecting despite 03-026 patch? (Tue Aug 12 2003 - 16:50:44 EDT)
• lathiat(at)bur.st
  • Re: MSBlast and other known exploits.. (Thu Aug 14 2003 - 06:24:31 EDT)
• Laudie, Enoch A.
  • mod to "killblast.vbs" script (Thu Aug 14 2003 - 15:04:16 EDT)
• Lee Evans
  • RE: Secure.dcom.exe (Wed Aug 06 2003 - 19:38:28 EDT)
  • Secure.dcom.exe (Wed Aug 06 2003 - 06:50:13 EDT)
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Tue Aug 05 2003 - 18:54:12 EDT)
• Lee Seidman
  • Backdoor.Trojan and payload.dat (Wed Aug 06 2003 - 12:24:27 EDT)
• Levinson, Karl
  • RE: Dig in: autorooter, maybe that IRC one but SAV doesnt pick it up. (Wed Aug 06 2003 - 09:26:58 EDT)
• Lloyd Taylor
  • Re: Blasting Blaster.Worm (aka LovSan Virus) (Tue Aug 12 2003 - 23:51:36 EDT)
• Lucas Zaichkowsky
  • RE: MSBLASTER Infecting despite 03-026 patch? (Tue Aug 12 2003 - 19:44:26 EDT)
• Maher Odeh
  • Weird HTTP Requests. (Thu Aug 14 2003 - 06:55:28 EDT)
• Makoto Shiotsuki
  • Re: Command Line RPC vulnerability scanner? (Fri Aug 01 2003 - 00:16:55 EDT)
• Marc Maiffret
  • RE: MSBLASTER Infecting despite 03-026 patch? (Thu Aug 14 2003 - 14:10:34 EDT)
  • RE: MSBLASTER Infecting despite 03-026 patch? (Thu Aug 14 2003 - 13:09:54 EDT)
  • RE: MSBLASTER Infecting despite 03-026 patch? (Tue Aug 12 2003 - 01:34:55 EDT)
  • RE: DCOM95 for Windows 95 (Fri Aug 08 2003 - 12:44:48 EDT)
• MARLON BORBA
  • Re: Suspicious firewall logs (Fri Aug 01 2003 - 13:05:19 EDT)
• Matthew.Dalton(at)rochester.edu
  • Re: Pdmin / Trojaned csrss.exe (Mon Aug 04 2003 - 16:39:12 EDT)
• Michael.Washington(at)fitchratings.com
  • Re: WORM_MIMAIL.A Anyone have any info on what this does yet? (Fri Aug 01 2003 - 14:24:36 EDT)
• Micheal Patterson
  • MSBlast and other known exploits.. (Wed Aug 13 2003 - 08:44:44 EDT)
• Michel Angelo da Silva Pereira
  • Connections on ports 2023/tcp and 1803/tcp (Tue Aug 12 2003 - 13:36:49 EDT)
• Miguel Ibarra
  • Re: Dig in: autorooter, maybe that IRC one but SAV doesnt pick it up. (Fri Aug 08 2003 - 10:38:20 EDT)
• Mike Dresser
  • RE: MSBLASTER Infecting despite 03-026 patch? (Tue Aug 12 2003 - 01:49:00 EDT)
• Mike Iglesias
  • Re: [unisog] Heads up! distributed scans and attacks targeting nsiss.dll (Fri Aug 08 2003 - 16:34:51 EDT)
• morning_wood
  • Re: Dig in: autorooter, maybe that IRC one but SAV doesnt pick it up. (Fri Aug 08 2003 - 20:38:09 EDT)
  • Re: port 445 probes continued (Fri Aug 08 2003 - 20:25:35 EDT)
  • Re: RPC DCOM exploit (Mon Aug 04 2003 - 11:16:34 EDT)
  • Re: RPC DCOM exploit (Fri Aug 01 2003 - 13:03:37 EDT)
• Neatherly, William
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Fri Aug 01 2003 - 16:28:30 EDT)
• Nick FitzGerald
  • Re: msblast.exe --> DDoS against windowsupdate.com (research) (Wed Aug 13 2003 - 21:52:08 EDT)
• oherrera
  • Re: Heads up! distributed scans and attacks targeting nsiss.dll (Fri Aug 08 2003 - 19:11:31 EDT)
• Oliver.Gruskovnjak(at)BIT.admin.ch
  • rpc dcom worm and windowsupdate (Wed Aug 13 2003 - 05:03:54 EDT)
• opticfiber
  • Re: [normal] RE: [Full-Disclosure] Re: Secure.dcom.exe (Sun Aug 10 2003 - 00:48:02 EDT)
• Paolo Monti
  • Re: WORM_MIMAIL.A cleaner ? (Tue Aug 05 2003 - 08:58:18 EDT)
• Pete Phillips
  • Re: WORM_MIMAIL.A Anyone have any info on what this does yet? (Wed Aug 06 2003 - 05:58:26 EDT)
• Peter Fry
  • Re: RPC DCOM exploit (Sat Aug 02 2003 - 21:05:23 EDT)
  • Re: RPC DCOM exploit (Sat Aug 02 2003 - 21:03:12 EDT)
• Phil Roginski
  • Re: MSBlast and other known exploits.. (Wed Aug 13 2003 - 20:39:02 EDT)
• Ramsinghani, Aashish (EM, GECIS)
  • RE: Question for all (Tue Aug 05 2003 - 07:55:53 EDT)
• Roberts, Chris
  • RE: port 445 probes continued (Sat Aug 09 2003 - 03:47:23 EDT)
• Rodrigo Barbosa
  • Re: Scan of TCP 552-554 (Fri Aug 01 2003 - 20:10:19 EDT)
  • Re: Scan of TCP 552-554 (Fri Aug 01 2003 - 13:26:03 EDT)
• Rohny Jotton
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Mon Aug 04 2003 - 16:43:31 EDT)
• RSH (at) Rogers
  • RE: Blaster Variant - W32.Blaster.B.Worm (Wed Aug 13 2003 - 22:59:40 EDT)
• Russell Fulton
  • Heads up! distributed scans and attacks targeting nsiss.dll (Thu Aug 07 2003 - 23:44:34 EDT)
  • RE: Command Line RPC vulnerability scanner? (Sun Aug 03 2003 - 21:42:48 EDT)
• Sam Evans
  • Re: WORM_MIMAIL.A Anyone have any info on what this does yet? (Fri Aug 01 2003 - 16:51:45 EDT)
• Sander Smeenk
  • /tmp/pdk ? (Sun Aug 03 2003 - 14:16:57 EDT)
• Schmehl, Paul L
  • RE: Tools for monitoring port scans / connection attmempts? (Thu Aug 14 2003 - 22:13:07 EDT)
  • RE: DCOM95 for Windows 95 (Fri Aug 08 2003 - 15:12:08 EDT)
  • RE: Secure.dcom.exe (Wed Aug 06 2003 - 19:29:14 EDT)
  • RE: Command Line RPC vulnerability scanner? (Fri Aug 01 2003 - 14:18:01 EDT)
  • RE: WORM_MIMAIL.A Anyone have any info on what this does yet? (Fri Aug 01 2003 - 14:16:34 EDT)
• Schrack, Robert
  • RE: Pdmin / Trojaned csrss.exe (Sun Aug 03 2003 - 16:55:15 EDT)
• Scott M. Algatt
  • Re: WORM_MIMAIL.A Anyone have any info on what this does yet? (Fri Aug 01 2003 - 14:32:16 EDT)
• sean.richmond(at)sophos.com.au
  • Re: MSBLASTER Infecting despite 03-026 patch? (Tue Aug 12 2003 - 02:37:23 EDT)
• Sekurity Wizard
  • RE: msblast.exe worm FINDINGS (DDoS) ---> Can someone please confirm? (Thu Aug 14 2003 - 10:00:57 EDT)
  • msblast.exe --> DDoS against windowsupdate.com (research) (Wed Aug 13 2003 - 15:03:17 EDT)
  • RE: msblast.exe available (Mon Aug 11 2003 - 23:27:22 EDT)
• Shalla
  • Re: MSBlast and other known exploits.. (Wed Aug 13 2003 - 21:04:43 EDT)
• Sorin Victor DUDEA
  • Re: Secure.dcom.exe (Fri Aug 08 2003 - 02:25:26 EDT)
• Steffen Kluge
  • Re: rpc dcom worm and windowsupdate (Wed Aug 13 2003 - 20:45:18 EDT)
• steve(at)uk.intasys.com
  • Re: Tools for monitoring port scans / connection attmempts? (Thu Aug 14 2003 - 09:12:58 EDT)
  • Tools for monitoring port scans / connection attmempts? (Wed Aug 13 2003 - 14:47:34 EDT)
• Steven M. Christey
  • Re: WORM_MIMAIL.A Anyone have any info on what this does yet? (Fri Aug 01 2003 - 19:44:15 EDT)
• Stong, Ian C. (Contractor)
  • RE: Command Line RPC vulnerability scanner? (Fri Aug 01 2003 - 07:32:51 EDT)
• Stuart
  • RE: Tools for monitoring port scans / connection attmempts? (Wed Aug 13 2003 - 21:05:21 EDT)
• sunzi
  • Re: Heads up! distributed scans and attacks targeting nsiss.dll (Thu Aug 14 2003 - 16:03:27 EDT)
• the_baron(at)ntlworld.com
  • MsBlast (Wed Aug 13 2003 - 10:11:42 EDT)
• Thorsten Holz
  • Re: Command Line RPC vulnerability scanner? (Mon Aug 04 2003 - 14:47:23 EDT)
• Torsten Mueller
  • Re: WORM_MIMAIL.A Anyone have any info on what this does yet? (Mon Aug 04 2003 - 12:02:19 EDT)
• Trent Dilkie
  • Blaster Variant - W32.Blaster.B.Worm (Wed Aug 13 2003 - 12:44:25 EDT)
• Vachon, Scott
  • RE: MSBLASTER Infecting despite 03-026 patch? (Wed Aug 13 2003 - 08:49:31 EDT)
• Valdis.Kletnieks(at)vt.edu
  • Re: DCOM worm analysis report: W32.Blaster.Worm (Wed Aug 13 2003 - 00:07:03 EDT)
  • Re: WORM_MIMAIL.A Anyone have any info on what this does yet? (Mon Aug 04 2003 - 13:49:31 EDT)
• wirepair
  • Re: port 445 probes continued (Sun Aug 10 2003 - 15:05:20 EDT)
  • port 445 probes continued (Fri Aug 08 2003 - 16:09:54 EDT)
  • 445 probes (Thu Aug 07 2003 - 01:25:02 EDT)
  • Re: RPC DCOM exploit (Fri Aug 01 2003 - 14:32:37 EDT)
• YAO,TONY (HP-NewZealand,ex1)
  • RE: MSBlast and other known exploits.. (Wed Aug 13 2003 - 18:14:42 EDT)
• Zach Forsyth
  • RE: rpc dcom worm and windowsupdate (Wed Aug 13 2003 - 20:50:53 EDT)

  This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:02:18 EDT