[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-Disclosure] Re: New LSASS-based worm finally here (Sasser)
- To: Javier Fernandez-Sanguino <jfernandez@xxxxxxxxxxxx>
- Subject: Re: [Full-Disclosure] Re: New LSASS-based worm finally here (Sasser)
- From: Jason <security@xxxxxxxxxxx>
- Date: Mon, 03 May 2004 22:42:38 -0400
Javier Fernandez-Sanguino wrote:
[...]
[1] Approaching the record of worms in other OS, which, I believe, is
held by Scalper (10 days from patch to worm). But hey, they could browse
the source changes for that one.
It did not attack an OS directly but I believe the witty worm [1] holds
the record to date. A 1 day window from advisory to release, it attacked
and destroyed a security component that was supposed to protect against
these issues...
[1] - http://www.caida.org/analysis/security/witty/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html