http://www.securityfocus.com/archive/1/392354/2005-03-02/2005-03-08/0
Here is the POC code - http://www.k-otik.com/exploits/20050307.windos.c.php
Make sure your ACL's prevent incoming traffic sourced from your netblocks.
Darrell
------------------------------------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.