SecurityFocus Incidents
By Thread

161 messages sorted by: [ author ] [ date ] [ subject ] [ attachment ]

---

Starting: 12/01/02
Ending: 12/31/02

• NIMDA - ceased ? - Tomo (12/25/02)
  • Re: NIMDA - ceased ? - Neil Dickey (12/27/02)
    • Re: NIMDA - ceased ? - James C. Slora Jr. (12/27/02)
  • Re: NIMDA - ceased ? - Johannes Ullrich (12/27/02)
  • Re: NIMDA - ceased ? - Skip Carter (12/27/02)
  • Re: NIMDA - ceased ? - Roger Thompson (12/28/02)
• Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second alfaentomega (12/24/02)
  • Re: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second Pavel Kankovsky (12/26/02)
    • Re: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second alfaentomega (12/27/02)
  • Re: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second Fyodor (12/24/02)
    • Re: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second alfaentomega (12/27/02)
  • RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second alfaentomega (12/27/02)
  • RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second Charles.Fasching@milestonesystems.com (12/26/02)
    • RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second alfaentomega (12/27/02)
    • RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second H C (12/27/02)
  • RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second Hornat, Charles (12/27/02)
• strange traffic securitynotice@cronus.cnicinc.com (12/23/02)
  • RE: strange traffic Rob Shein (12/24/02)
• TsInternetUser priv. escalation; blank passwords; service passwords Curt Wilson (12/23/02)
• Compromised System RH7.3-ICMP-STP-DoS Ron Gedye (12/20/02)
• port 3717/udp? Jacek Lipkowski (12/20/02)
• hpd, afb, sc, and sn Gordon Chamberlin (12/20/02)
  • Re: hpd, afb, sc, and sn gminick (12/21/02)
  • Re: hpd, afb, sc, and sn Greg Barnes (12/20/02)
  • Re: hpd, afb, sc, and sn Brad Arlt (12/20/02)
  • RE: hpd, afb, sc, and sn Bojan Zdrnja (12/21/02)
  • Re: hpd, afb, sc, and sn deadcalm@treshna.com (12/23/02)
• RPAT - Realtime Proxy Abuse Triangulation Stephen Friedl (12/20/02)
  • Re: RPAT - Realtime Proxy Abuse Triangulation Kurt Seifried (12/24/02)
    • Re: RPAT - Realtime Proxy Abuse Triangulation Mathias Wegner (12/24/02)
      • Re: RPAT - Realtime Proxy Abuse Triangulation Kevin Reardon (12/27/02)
      • RE: RPAT - Realtime Proxy Abuse Triangulation Rob Shein (12/28/02)
      • Re: RPAT - Realtime Proxy Abuse Triangulation Greg Barnes (12/30/02)
      • Re: RPAT - Realtime Proxy Abuse Triangulation Gary Flynn (12/28/02)
      • RE: RPAT - Realtime Proxy Abuse Triangulation Rob Shein (12/30/02)
      • Re: RPAT - Realtime Proxy Abuse Triangulation Syzop (12/30/02)
  • Re: RPAT - Realtime Proxy Abuse Triangulation Stephen Friedl (12/24/02)
  • Re: RPAT - Realtime Proxy Abuse Triangulation Greg Barnes (12/30/02)
    • Re: RPAT - Realtime Proxy Abuse Triangulation Greg Barnes (12/30/02)
      • Virus? Trojan? David Gillett (12/30/02)
      • Re: Virus? Trojan? Peter Kruse (12/31/02)
• abuse of open transparent proxies horape@tinuviel.compendium.net.ar (12/18/02)
• IRC -> smtp worm? Joao Gouveia (12/18/02)
  • Re: IRC -> smtp worm? Ţórhallur Hálfdánarson (12/18/02)
  • Re: IRC -> smtp worm? H C (12/18/02)
  • Re: IRC -> smtp worm? Eric Chien (12/18/02)
• FW: Lioten Worm 135-139 and 445 Pricher Jeffrey Contr AFCA/GCF (12/17/02)
• Worm on 445/tcp? Scott A.McIntyre (12/17/02)
  • RE: Worm on 445/tcp? OBrien, Brennan (12/17/02)
  • Re: Worm on 445/tcp? Scott Fendley (12/17/02)
  • Re: Worm on 445/tcp? Tom.Gast@walgreens.com (12/17/02)
  • Re: Worm on 445/tcp? Joe Blatz (12/17/02)
    • Re: Worm on 445/tcp? james (12/17/02)
  • Re: Worm on 445/tcp? Stephen J. Friedl (12/17/02)
    • Re: Worm on 445/tcp? Ryan Yagatich (12/18/02)
  • Re: Worm on 445/tcp? Stephen Friedl (12/18/02)
  • Re: Worm on 445/tcp? Kyle Lai (12/19/02)
• Iraq Oil worm Stephen Friedl (12/17/02)
• fswserv.html ???? James-lists (12/16/02)
  • Re: fswserv.html ???? dev (12/17/02)
    • Re: fswserv.html ???? Adam Bultman (12/17/02)
      • Re: fswserv.html ???? james (12/17/02)
  • Re: fswserv.html ???? james (12/17/02)
• Win2k Audit Logs - What happened here? Johnny Walker (12/16/02)
  • RE: Win2k Audit Logs - What happened here? george.wasgatt@insurity.com (12/16/02)
  • Re: Win2k Audit Logs - What happened here? H C (12/16/02)
• Terminal Services / TsInternetUser [RMC-RUFLVP4] Romulo M. Cholewa (12/14/02)
• Logs: Many hits with source port of 80 Byrne Ghavalas (12/13/02)
  • Re: Logs: Many hits with source port of 80 Valdis.Kletnieks@vt.edu (12/16/02)
  • Re: Many hits with source port of 80 Maxime Ducharme (12/16/02)
  • RE: Logs: Many hits with source port of 80 James C Slora Jr (12/16/02)
    • Re: Logs: Many hits with source port of 80 Byrne Ghavalas (12/16/02)
      • Re: Logs: Many hits with source port of 80 Kevin Bowman (12/16/02)
      • RE: Logs: Many hits with source port of 80 James C Slora Jr (12/16/02)
  • Re: Logs: Many hits with source port of 80 Russell Fulton (12/16/02)
  • Re: Logs: Many hits with source port of 80 Joe Stewart (12/16/02)
• Rooted, .haos on system Damian Gerow (12/13/02)
  • Re: Rooted, .haos on system Damian Gerow (12/16/02)
    • Re: Rooted, .haos on system Damian Gerow (12/16/02)
      • Re: Rooted, .haos on system Mike Katz (12/16/02)
      • Re: Rooted, .haos on system zeno (12/16/02)
      • Re: Rooted, .haos on system Carlos Eduardo Pedroza Santiviago (12/16/02)
      • Re: Rooted, .haos on system Damian Gerow (12/16/02)
      • New CIFS (port 445) worm? David Gillett (12/17/02)
      • Re: New CIFS (port 445) worm? Zen (12/17/02)
    • Re[2]: Rooted, .haos on system Oliver.C.Rochford CFH (12/17/02)
  • Re: Rooted, .haos on system Mattias Hedenskog (12/16/02)
    • Re: Rooted, .haos on system zeno (12/16/02)
  • Re: Rooted, .haos on system Julian Young (12/17/02)
• DNS help larosa, vjay (12/11/02)
  • RE: DNS help larosa, vjay (12/12/02)
    • Re: DNS help Valdis.Kletnieks@vt.edu (12/12/02)
    • Re: DNS help Matt Zimmerman (12/15/02)
  • RE: DNS help Tom Arseneault (12/12/02)
  • RE: DNS help Faron.Golden@Gunter.AF.mil (12/12/02)
  • Re: DNS help Valdis.Kletnieks@vt.edu (12/12/02)
• strange attractors or weaknesses in Nimda's prng Russell Fulton (12/11/02)
• Fwd: EBay Fraud Attempt Dave Laird (12/09/02)
  • RE: EBay Fraud Attempt Carlo Costanzo (12/10/02)
    • Re: EBay Fraud Attempt Dave Laird (12/10/02)
    • Re: EBay Fraud Attempt Mark (12/11/02)
• EBay Fraud Attempt Logan F.D. Greenlee (12/07/02)
  • Re: EBay Fraud Attempt Stephen Friedl (12/09/02)
    • Re: EBay Fraud Attempt Stephen J. Friedl (12/10/02)
  • Re: EBay Fraud Attempt jlewis@lewis.org (12/09/02)
    • Re: EBay Fraud Attempt Chris A. Mattingly (12/10/02)
    • Re: EBay Fraud Attempt Kee Hinckley (12/10/02)
  • Re: EBay Fraud Attempt Waitman C. Gobble, II (12/09/02)
  • RE: EBay Fraud Attempt george.wasgatt@insurity.com (12/10/02)
  • RE: EBay Fraud Attempt OBrien, Brennan (12/10/02)
  • RE: EBay Fraud Attempt Chris Gordon (12/11/02)
• Spam via proxy listuser (12/07/02)
  • Re: Spam via proxy Christopher X. Candreva (12/09/02)
  • Re: Spam via proxy Jefferson Ogata (12/09/02)
  • Re: Spam via proxy Volker Tanger (12/09/02)
  • Re: Spam via proxy jlewis@lewis.org (12/09/02)
  • Re: Spam via proxy Joe Stewart (12/09/02)
• high activity on port 3061 udp/tcp Marcelo Bartsch (12/06/02)
• Does W2k issue an NBNS query automatically following each unsuccessful reverse DNS query? Jack Arenberg (12/07/02)
• netbios vuln ohnonono@hushmail.com (12/06/02)
  • Re: netbios vuln KoRe MeLtDoWn (12/09/02)
  • Re: netbios vuln H C (12/09/02)
  • Re: netbios vuln Valdis.Kletnieks@vt.edu (12/09/02)
  • Re: netbios vuln Nick FitzGerald (12/09/02)
• Black Ice small segment size FTP attack caused by FX-scanner Curt Wilson (12/06/02)
• A small quandary Mahoney, Paul (12/05/02)
  • RE: A small quandary Jerry Shenk (12/06/02)
  • RE: A small quandary Rob Shein (12/06/02)
  • Re: A small quandary H C (12/06/02)
    • RE: A small quandary Bojan Zdrnja (12/09/02)
  • Re: A small quandary Mike Katz (12/06/02)
  • Re: A small quandary gminick (12/07/02)
  • Odd entries in my Security Router logs Julian Young (12/09/02)
    • RE: Odd entries in my Security Router logs Jim Terry (12/10/02)
      • RE: Odd entries in my Security Router logs Julian Young (12/10/02)
    • RE: Odd entries in my Security Router logs Andrews, Jonathan (US - Hermitage) (12/10/02)
      • RE: Odd entries in my Security Router logs Julian Young (12/11/02)
      • Re: Odd entries in my Security Router logs Michael Sierchio (12/11/02)
      • RE: Odd entries in my Security Router logs David Gillett (12/11/02)
      • Re: Odd entries in my Security Router logs Valdis.Kletnieks@vt.edu (12/12/02)
      • Re: Odd entries in my Security Router logs Valdis.Kletnieks@vt.edu (12/12/02)
      • Re: Odd entries in my Security Router logs James C. Slora Jr. (12/11/02)
      • Re: Odd entries in my Security Router logs HggdH (12/11/02)
• recent rds vuln Study List (12/04/02)
• Incident tracking database Danny (12/03/02)
  • Re: Incident tracking database Paul Gillingwater (12/04/02)
  • Re: Incident tracking database Chip Mefford (12/04/02)
    • what else you can do with worm networks...fun, profit, etc Anton A. Chuvakin (12/09/02)
  • Re: Incident tracking database Steven Hong (12/04/02)
  • Re: Incident tracking database james (12/04/02)
  • Re: Incident tracking database Holger Kipp (12/04/02)
    • Re: Incident tracking database Russell Fulton (12/05/02)
      • Re: Incident tracking database Chris Adams (12/06/02)
• [Fwd: XSS on ICQ leading to password compromise] Rafael Coninck Teigao (12/02/02)
• Re: TCP:80, TCP:1433 squelda 1.0 probe Joe Stewart (12/02/02)
  • Re: TCP:80, TCP:1433 squelda 1.0 probe John Sage (12/03/02)
• RE: New scanner? Rob Shein (12/02/02)
• Re: Bad protocol version identification '^V^C^A' jm (11/30/02)
  • RE: Bad protocol version identification '^V^C^A' Bojan Zdrnja (12/01/02)
    • Re: Bad protocol version identification '^V^C^A' Matt Harris (12/02/02)
  • Re: Bad protocol version identification '^V^C^A' D.C. van Moolenbroek (12/01/02)

Last message date: 12/31/02
Archived on: 12/31/02 CET

---

161 messages sorted by: [ author ] [ date ] [ subject ] [ attachment ]

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint

www.derkeiler.com  > Mailing-Lists  > securityfocus  > incidents  > 2002-12