SecurityFocus Incidents
By Author

195 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

---

Starting: 01/02/03
Ending: 01/31/03

• abretten@kroger.com
  • Re: graphical stats of new SQL worm (01/27/03)
• Adam Bultman
  • Re: Root password changed (01/06/03)
• Andreas Str|m
  • Re: mIRC Zombie, port 445 (01/22/03)
• Axel Beckert
  • Re: Strange Apache logs - maybe DDOS? (01/19/03)
• Bojan Zdrnja
  • RE: MSDE contained in... (01/29/03)
• Brian Taylor
  • RE: PDL anti-spam blacklist (01/05/03)
  • RE: PDL anti-spam blacklist (01/03/03)
• Bruce McLeod
  • RE: MSDE contained in... (01/30/03)
• Carl Inglis
  • Microsoft SQL Server 2000 worm - port 1434 (01/25/03)
• Carlo Ottaviani
  • Re: SNMP Weirdness (01/27/03)
• Chris
  • Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (12/20/02)
• Chris Barford
  • Re: /sumthin Revisited (01/06/03)
  • Re: Root password changed (01/06/03)
• Chris Caydes
  • MSDE contained in... (MS Office ? really ?) (01/28/03)
• Chris Norris
  • Re: /sumthin Revisited (01/07/03)
• Chris Wilkes
  • Re: Packet from port 80 with spoofed microsoft.com ip (01/29/03)
• Christian Vogel
  • Re: SNMP Weirdness (01/23/03)
• Christopher Wagner
  • RE: Firewall logging port 6346 (01/30/03)
  • RE: PDL anti-spam blacklist (01/02/03)
• Christopher X. Candreva
  • RE: What constitutes authorized server access? - was Re: RPAT - Realtime Proxy Abuse Triangulation (01/02/03)
• Crist J. Clark
  • Re: Openbsd 3.2 wtmp delay and named backdoor (01/20/03)
• Dan Perez
  • RE: strange attacks - flood udp packets from 1030 to msql (01/25/03)
• Danny
  • RE: New spam-probing wave? (01/25/03)
• dataspy
  • Re: Subseven 2.2 Server? (01/06/03)
• Dave Aitel
  • Re: Increased activity on UDP/1434 (01/25/03)
• David Hickman
  • Re: Firewall logging port 6346 (01/30/03)
• David Vincent
  • RE: MS IIS 5 server is hacked leaving undeletable folders and fil es (01/02/03)
• Davis Ray Sickmon, Jr
  • Re: MSDE contained in... (01/28/03)
• Dejan
  • Re: Increased activity on UDP/1434 (01/25/03)
• Deus, Attonbitus
  • Re: MSDE contained in... (MS Office ? really ?) (01/29/03)
• Dmitri Smirnov
  • Increased activity on UDP/1434 (01/25/03)
• Don Phillipe
  • Thanks everyone! RE: MS IIS 5 server is hacked leaving undeletable folders and files (01/03/03)
  • MS IIS 5 server is hacked leaving undeletable folders and files (12/31/02)
• dr john halewood
  • Re: Packet from port 80 with spoofed microsoft.com ip (01/30/03)
  • Re: SQL Sapphire Worm Analysis (01/27/03)
• Drew, Dale
  • RE: strange attacks - flood udp packets from 1030 to msql (01/25/03)
• dtm@paypal.com
  • Re: Paypal.com hosting IRC server, possible hack? (01/25/03)
• Duncan Hill
  • Re: MS IIS 5 server is hacked leaving undeletable folders and files (01/02/03)
• Ed Street
  • RE: Mysterious "Support" account created on Win2k server (01/02/03)
• Eric Kimminau
  • Abnormally high Sub-Seven attack rate increase (12/31/02)
• Eric Nelson
  • Re: strange attacks - flood udp packets from 1030 to msql (01/26/03)
• Eric Weaver
  • Openbsd 3.2 wtmp delay and named backdoor (01/15/03)
• f.johan.beisser
  • Re: Openbsd 3.2 wtmp delay and named backdoor (01/20/03)
• Floydman
  • Re: Mysterious "Support" account created on Win2k server (01/03/03)
• Gary Flynn
  • Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (01/30/03)
  • What constitutes authorized server access? - was Re: RPAT - Realtime Proxy Abuse Triangulation (12/31/02)
• GertJan Hagenaars
  • Re: Curious "spam" (or broken viral payload)... (01/09/03)
• Gianni Tedesco
  • wierd: udp port 0 traffic (01/27/03)
• Gkruel
  • Scan UDP port 135 (01/28/03)
• greg@optionsinternet.com
  • RE: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (01/30/03)
• H C
  • Re: Packet from port 80 with spoofed microsoft.com ip (01/29/03)
  • Re: Odd Shares showing up on workstations (01/22/03)
  • RE: Mysterious "Support" account created on Win2k server (01/03/03)
  • RE: Abnormally high Sub-Seven attack rate increase (01/03/03)
• H D Moore
  • New MS SQL Server Worm (01/25/03)
• Helmut Springer
  • Re: Variant or original posting to packetstormsecurity - long (01/29/03)
• Ian O'Brien
  • MS SQL server worm logs question (01/27/03)
• incidents.nospam13@web-cities.net
  • New Web Hack? (01/24/03)
• J Jewitt
  • Odd Shares showing up on workstations (01/16/03)
• james
  • Re: Root password changed (01/06/03)
• James C Slora Jr
  • RE: SNMP Weirdness (01/23/03)
  • RE: Virus? Trojan? (01/10/03)
  • RE: Abnormally high Sub-Seven attack rate increase (01/02/03)
• James C. Slora Jr.
  • Re: Virus? Trojan? (01/13/03)
• James Friesen
  • RE: PDL anti-spam blacklist (01/04/03)
• James Turner
  • Re: MS IIS 5 server is hacked leaving undeletable folders and files (01/02/03)
• Jason Coombs
  • RE: Hacked web server (01/21/03)
• Jeff Bollinger
  • Re: mIRC Zombie, port 445 (01/22/03)
• Jeff Kell
  • Re: New spam-probing wave? (01/23/03)
  • Re: Abnormally high Sub-Seven attack rate increase (01/02/03)
• Jens Hektor
  • udp/1434 (01/25/03)
• jeremy.ford@advancepcs.com
  • RE: MSDE contained in... (01/29/03)
• jlewis@lewis.org
  • Re: PDL anti-spam blacklist (01/02/03)
• Joe Kattner
  • Re: Root password changed (01/06/03)
• Johan Augustsson
  • Re: MSDE contained in... (01/29/03)
• Johannes Ullrich
  • Re: MSDE contained in... (01/28/03)
• John Paul
  • PDL anti-spam blacklist (12/31/02)
• John Pugh
  • Re: Hacked web server (01/21/03)
• John Washington
  • Re: Curious "spam" (or broken viral payload)... (01/09/03)
• Johnson, April
  • Possible google hack (01/07/03)
• Jonathan A. Zdziarski
  • RE: /sumthin Revisited (01/07/03)
  • RE: /sumthin Revisited (01/07/03)
  • RE: /sumthin Revisited (01/07/03)
  • RE: PDL anti-spam blacklist (01/06/03)
• Jonathan Rickman
  • Re: Virus? Trojan? (12/31/02)
• Jos Kirps|EducDesign
  • Firewall logging port 6346 (01/29/03)
• Jose Nazario
  • Re: Openbsd 3.2 wtmp delay and named backdoor (01/21/03)
• JP Vossen
  • RE: MSDE contained in... (01/31/03)
• Justin Bloom
  • Re: Increased activity on UDP/1434 (01/25/03)
• Keith Owens
  • Re: Packet from port 80 with spoofed microsoft.com ip (01/30/03)
• Keith Pachulski
  • SNMP Weirdness (01/20/03)
• Kevin Reardon
  • Re: What constitutes authorized server access? - was Re: RPAT - Realtime Proxy Abuse Triangulation (01/02/03)
• kris carlier
  • Re: strange traffic (01/25/03)
• Kurt
  • RE: MSDE contained in... (01/28/03)
• Kurt Seifried
  • Re: Packet from port 80 with spoofed microsoft.com ip (01/30/03)
• kyle@kylelai.com
  • RE: Mysterious "Support" account created on Win2k server (01/03/03)
  • RE: Mysterious "Support" account created on Win2k server (01/03/03)
  • RE: Mysterious "Support" account created on Win2k server (01/03/03)
• Larsen, Colin
  • RE: Packet from port 80 with spoofed microsoft.com ip (01/30/03)
• Lisa Casey
  • Re: Root password changed (01/07/03)
• Loki
  • RE: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (01/31/03)
• lsi
  • HTML email bug [was: (Fwd) hi] (01/30/03)
• Marc Maiffret
  • RE: SQL Sapphire Worm Analysis (01/27/03)
  • SQL Sapphire Worm Analysis (01/25/03)
• Mark
  • Re: Curious "spam" (or broken viral payload)... (01/09/03)
  • Re: PDL anti-spam blacklist (01/02/03)
• Mark E. Donaldson
  • RE: MSDE contained in... (01/29/03)
• Mark J. Lastdrager
  • graphical stats of new SQL worm (01/25/03)
• Martin K. Lee - XML Consulting
  • unusual http access in proxy log (01/23/03)
• Matthew Cole
  • RE: Mysterious "Support" account created on Win2k server (01/03/03)
• Michael H. Warfield
  • Re: Scan UDP port 135 (01/29/03)
• Michael Katz
  • Re: Hacked web server (01/13/03)
  • Re: /sumthin Revisited (01/08/03)
• Michael LaSalvia
  • RE: mIRC Zombie, port 445 (01/23/03)
  • RE: mIRC Zombie, port 445 (01/22/03)
  • RE: Hacked web server (01/13/03)
  • RE: Root password changed (01/06/03)
  • RE: Mysterious "Support" account created on Win2k server (01/04/03)
• Michael Roberts
  • Re: SNMP Weirdness (01/23/03)
• Michael Rowe
  • Re: Packet from port 80 with spoofed microsoft.com ip (01/30/03)
  • Re: Packet from port 80 with spoofed microsoft.com ip (01/30/03)
  • Re: Packet from port 80 with spoofed microsoft.com ip (01/30/03)
  • Packet from port 80 with spoofed microsoft.com ip (01/29/03)
• Micheal Patterson
  • Re: SQL Sapphire Worm Analysis (01/27/03)
• Michiel Overtoom
  • RE: Mysterious "Support" account created on Win2k server (01/03/03)
• mistymountainhop@hushmail.com
  • Paypal.com hosting IRC server, possible hack? (01/24/03)
• NESTING, DAVID M (SBCSI)
  • RE: Packet from port 80 with spoofed microsoft.com ip (01/29/03)
• Neulinger, Nathan
  • Any known exploit for the samba 2.2.2-2.2.6 encrypted password vuln? (01/08/03)
• Nick FitzGerald
  • RE: Virus? Trojan? (01/13/03)
  • Re: Virus? Trojan? (12/31/02)
• Nick Jacobsen
  • Subseven 2.2 Server? (01/04/03)
  • Re: Thanks everyone! RE: MS IIS 5 server is hacked leaving undeletable folders and files (01/04/03)
• Noam Eppel
  • /sumthin Revisited (01/05/03)
• noconflic
  • Re: /sumthin Revisited (01/08/03)
• oobs3c02@attbi.com
  • Variant or original posting to packetstormsecurity - long (01/28/03)
• Ostfeld, Thomas
  • Mysterious "Support" account created on Win2k server (01/02/03)
• Otto Dandenell
  • Re: Increased activity on UDP/1434 (01/25/03)
• Patrick Finch
  • Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (01/25/03)
• Patrick Oonk
  • New spam-probing wave? (01/21/03)
• Pauling
  • Re: New spam-probing wave? (01/23/03)
• Peter Snell
  • klez variant?? (01/30/03)
• Peter Triller
  • Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (01/31/03)
• pj@esec.dk
  • Re: mIRC Zombie, port 445 (01/22/03)
• RCS
  • Root password changed (01/04/03)
• Rich Puhek
  • Re: Packet from port 80 with spoofed microsoft.com ip (01/30/03)
• Richard Donovan
  • RE: MS IIS 5 server is hacked leaving undeletable folders and files (01/02/03)
• Rob Keown
  • RE: /sumthin Revisited (01/08/03)
• Rob Shein
  • RE: What constitutes authorized server access? - was Re: RPAT - Realtime Proxy Abuse Triangulation (12/31/02)
• Rogelio Vidaurri Courcelle
  • Hacked web server (01/10/03)
• rsavage@nandomedia.com
  • Re: Possible google hack (01/07/03)
• Russell Fulton
  • Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (01/31/03)
  • Re: Scan UDP port 135 (01/29/03)
  • Re: What constitutes authorized server access? - was Re: RPAT - Realtime Proxy Abuse Triangulation (01/02/03)
• Ryan Yagatich
  • RE: Hacked web server (01/24/03)
  • Re: Hacked web server (01/17/03)
• Sam Evans
  • Re: Increased activity on UDP/1434 (01/25/03)
• Sami Rautiainen
  • Re: mIRC Zombie, port 445 (01/22/03)
• Scott C. Kennedy
  • Is anyone else seeing a real heavy incrase in TCP/1434? (01/25/03)
• Scott Fendley
  • Re: Mysterious "Support" account created on Win2k server (01/02/03)
• Scott Phelps
  • RE: IRC -> smtp worm? (01/09/03)
• Security Consultant
  • Re[2]: Spoofed RFC1918 Network Source Addresses... (11/19/02)
• Shaw, Kevin
  • Take note of products that don't "advertise" they have MSDE/SQL i ntegration. (01/28/03)
• Shirley, Ed
  • NC_S_ISLCK? (01/01/03)
• slswick@aep.com
  • Re: Increased activity on UDP/1434 (01/25/03)
• Smith, Donald
  • RE: SNMP Weirdness (01/23/03)
• Stefan Laudat
  • Re: MSDE contained in... (01/29/03)
• Stephen A. Santos
  • RE: klez variant?? (01/31/03)
• Stephen J. Friedl
  • Re: RPAT - Realtime Proxy Abuse Triangulation (01/02/03)
• Stephen P. Berry
  • Re: RPAT - Realtime Proxy Abuse Triangulation (01/02/03)
• sunzi
  • Re: Hacked web server (01/14/03)
• Sverre H. Huseby
  • Re: /sumthin Revisited (01/07/03)
  • Re: /sumthin Revisited (01/07/03)
• sysadmin
  • Re: Root password changed (01/06/03)
• tcleary2@csc.com.au
  • Re: RPAT - Realtime Proxy Abuse Triangulation (12/31/02)
• terry white
  • Re: SQL Sapphire Worm Analysis (01/27/03)
• Thiago Conde Figueiró
  • Re: Packet from port 80 with spoofed microsoft.com ip (01/29/03)
• Thierry Zoller
  • Re: strange traffic (01/25/03)
• Thomas Ray
  • RE: SNMP Weirdness (01/24/03)
• Tibor Biro
  • Re: Hacked web server (01/13/03)
• Tina Bird
  • MSDE contained in... (01/28/03)
  • internet status (01/26/03)
• Tino Didriksen
  • Re: mIRC Zombie, port 445 (01/22/03)
  • mIRC Zombie, port 445 (01/19/03)
• Tomasz Papszun
  • Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (01/30/03)
• trent dilkie
  • RE: SQL Sapphire Worm Analysis (01/27/03)
• Uwe Dippel
  • strange attacks - flood udp packets from 1030 to msql (01/25/03)
• Valdis.Kletnieks@vt.edu
  • Re: Packet from port 80 with spoofed microsoft.com ip (01/30/03)
  • Re: Openbsd 3.2 wtmp delay and named backdoor (01/20/03)
• Vestal, David
  • Re: Firewall logging port 6346 (01/30/03)
• Víctor
  • Re: strange attacks - flood udp packets from 1030 to msql (01/25/03)
• Willsey, Rob (CCI-Omaha)
  • RE: MS IIS 5 server is hacked leaving undeletable folders and files (01/02/03)
• Wim Mees
  • strange traffic (01/25/03)
• Wolf, Glenn
  • RE: /sumthin Revisited (01/06/03)
• Zehra Erseymen
  • SGI.com hosts HACKED and being abused by scriptkiddies on IRC. (01/15/03)
• zmajd fully
  • Re: Packet from port 80 with spoofed microsoft.com ip (01/31/03)

Last message date: 01/31/03
Archived on: 01/31/03 CET

---

195 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint

www.derkeiler.com  > Mailing-Lists  > securityfocus  > incidents  > 2003-01