reports of DCOM worm on the loose...still waiting on MS for DOS patch for W2K w/ MS03-026 applied

From: Jeffrey Thomas (jthomas_at_ETAXFN.COM)
Date: 08/11/03

  • Next message: Russ: "reports of DCOM worm on the loose - Report#2" 
    Date:         Mon, 11 Aug 2003 16:33:59 -0400
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    Heads up folks, just saw this tidbit via www.incidents.org site:

    http://isc.sans.org/diary.html?date=2003-08-11

    Not seeing any mention of it elsewhere YET, but I trust the incident.org folks enough to send this out.

    Still eagerly awaiting the DCOM DOS patch for W2K w/ MS03-026 applied before another varient of this thing hits the net and goes after this vulnerability. The mess it could cause if such a worm get's behind a firewall protecting W2K systems...oh boy.

    Redmond....we need the darn W2K DCOM DOS patch FAST.

    Jeffrey Thomas

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
    Are You "Certifiable"? Summer's Hottest Certification Just Got HOTTER!

    With a growth rate exceeding 110%, the TICSA security practitioner
    certification is one of the hottest IT credentials available. And now, for
    a limited time, you can save 33% off of the TICSA certification exam! To
    learn more about the TICSA certification, and to register as a TICSA
    candidate online, just go to

    http://www.trusecure.com/offer/s0100/

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo

  • Next message: Russ: "reports of DCOM worm on the loose - Report#2"

    Relevant Pages

    • Re: Alert: Microsoft Security Bulletin - MS03-039
      ... The way that Microsoft patched the new RPC Part II vulnerability ... Summer's Hottest Certification Just Got HOTTER! ... To learn more about the TICSA certification, ...
      (NT-Bugtraq)
    • WHERE ARE NT4 OLD PASSWORDS STORED
      ... Sorry if this bores many of you (being an NT4 question), ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)
    • Firewalls and DCOM
      ... Never underestimate the lengths to which your users will inadvertently go through to infect a network;)" ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)
    • DCOM worm analysis report: W32.Blaster.Worm
      ... A Bugtraq user has already pointed out that a worm has been ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)
    • Something changing DNS server settings
      ... When I looked in the registry of one of the affected computers, ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)