Re: Trojans that use LDAP

From: GeekSpooky@aol.com
Date: 01/17/02 

From: GeekSpooky@aol.com
Date: Wed, 16 Jan 2002 23:10:51 EST
To: ppatterson@carillonis.com, gary.porter@matcomcorp.com, INCIDENTS@securityfocus.com

I work at a Naval comms center, and we use DAP/LDAP protocols for our message
dissemination system. Government/Military commands have Plain Language
Addresses(PLAs) which we store locally in a cached DIT and shadow daily
through our LDSA that is based centrally in Norfolk Virginia, this may not
prove the same for another command. It is possible, that someone updating
the primary and secondary DSA addresses could have made a typo, and as the
DIT is attempting to shadow, it is mistaking you, for it's true destination.

Jim

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com