NIMDA - ceased ? -

From: Tomo (tomo@c-wind.com)
Date: 12/25/02

  • Next message: alfaentomega: "RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second" 
    Date: Thu, 26 Dec 2002 02:00:00 +0900 (JST)
To: incidents@securityfocus.com
From: Tomo <tomo@c-wind.com>

    Hi, all.

    Is NIMDA ...(GET /scripts/..%252f../winnt/system32 ...something)
    ceased ?
    04:54, Dec. 23 UTC is the last access of them, around here.

    Any comments ?

    --- Tomo

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com

    • Quantcast