RE: Some abnormal behavior when opening excel and word files ..

• Previous message: Jim Laverty: "RE: Some abnormal behavior when opening excel and word files - Verisign issue actually"
• In reply to: Naren - Pactech: "Some abnormal behavior when opening excel and word files .."
• Next in thread: kevin sherwood: "RE: Some abnormal behavior when opening excel and word files .."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

To: <naren@pactech.net>, <security-basics@securityfocus.com>
Date: Thu, 8 Jan 2004 21:51:37 -0500

A friend sent me this tonight and it may answer your problem:

"A certificate which Verisign used for signing SSL certificates has expired.
When applications which depend on that certificate try to make an SSL
connection, they fail and try to access crl.verisign.com, the certificate
revocation list server. This has effectively DOS'ed that site, and Verisign
has now updated the DNS record for that address to include several
non-routable addresses, reducing the load on their servers. Some
applications affected include older Internet Explorer browsers, Java, and
Norton Antivirus (which may manifest itself as Microsoft Word being very
slow to start)."

Roger

****************************************************************************
*Roger A. Grimes, Computer Security Consultant
*BanneretCS, LLC
*CPA, MCSE:Security (NT/2000/2003), CNE (3/4), A+, Network+, Security+
*email:rogerg@cox.net
*cell: 757-615-3355
*Author of Malicious Mobile Code: Virus Protection for Windows (O'Reilly)
*and Honeypots for Windows (Apress)
****************************************************************************

-----Original Message-----
From: Naren - Pactech [mailto:naren@pactech.net]
Sent: Thursday, January 08, 2004 5:41 AM
To: security-basics@securityfocus.com
Subject: Some abnormal behavior when opening excel and word files ..

Hi guys,

I have a problem with a site ..

When the PC is connected to the LAN, opening local Excel and Word files
take abnormally long time .. disabling the AV does not make a difference
.. and a lot of SYNs are shown to the Verisign IPs of crl.verisign.com ..
198.49.161.200 - 198.49.161.205 - 198.49.161.206

However, if the Network cable is disconnected, the Excel and Word files
open faster ... with no connections attempted to crl.verisign.com ..

Anyone have any idea what could be the cause ?

Thanks in advance ..

Naren

---------------------------------------------------------------------------
Ethical Hacking at InfoSec Institute. Mention this ad and get $720 off any
course! All of our class sizes are guaranteed to be 10 students or less.
We provide Ethical Hacking, Advanced Ethical Hacking, Intrusion Prevention,
and many other technical hands on courses.
Visit us at http://www.infosecinstitute.com/securityfocus to get $720 off
any course!
----------------------------------------------------------------------------

• Previous message: Jim Laverty: "RE: Some abnormal behavior when opening excel and word files - Verisign issue actually"
• In reply to: Naren - Pactech: "Some abnormal behavior when opening excel and word files .."
• Next in thread: kevin sherwood: "RE: Some abnormal behavior when opening excel and word files .."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]