[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] Worm side effects

To: "Florian Weimer" <fw@deneb.enyo.de>
Subject: Re: [Full-Disclosure] Worm side effects
From: "Geoincidents" <geoincidents@getinfo.org>
Date: Mon, 25 Aug 2003 18:32:02 -0400

From: "Florian Weimer" <fw@deneb.enyo.de>

> AFAIK, the worm uses a standard Windows routine to generate those ICMP
> packets.

Nope, normal NT ping generates a 60 byte packet not 92 byte.

Geo.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Follow-Ups:
- Re: [Full-Disclosure] Worm side effects
  - From: malware@t-online.de (Michael Mueller)

References:
- [Full-Disclosure] Worm side effects
  - From: "Geo." <geoincidents@getinfo.org>
- Re: [Full-Disclosure] Worm side effects
  - From: Florian Weimer <fw@deneb.enyo.de>

Prev by Date: Re: [Full-Disclosure] CERT Employee Gets Owned
Next by Date: [Full-Disclosure] FW: SCADA providers say security not our problem
Prev by thread: Re: [Full-Disclosure] Worm side effects
Next by thread: Re: [Full-Disclosure] Worm side effects
Index(es):
- Date
- Thread