Re: [ilugd] MBlaster II for linux too?

2003-10-28 Thread Spoonman
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Well! the author is somewhat right. Because a virus written to
exploit M$ boxes will make them choke the network.

Secondly, If a Linux box is running an application on the target 
port it will have to take the massive DOS of the exploited M$ machines
on the network.

Even though the worm/virus might not be able to  exploit the *nix 
boxes it will take them down anyways.

PS: I'v seen it happen.

On Mon, Oct 27, 2003 at 11:53:37PM +0530, LinuxLingam wrote:
LinuxLingam
 I'd take the assertions about a single virus running on Winduhs, Linux
 and Unix (what's that, anyway?) with large handfuls of salt.  The
[snip]]
 - -- Raju
LinuxLingami wonder what the author meant. i doubt he/she meant a single virus, but
LinuxLingaman exploit that may exist in both systems.
[snip]
- ---end quoted text---

- -- 
all the things we keep inside,
are the things that really matter,
the face puts on its best disguise,
and all is well, until the heart betrays.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/nVpe7v3NbZTFJeIRAq5MAJ0R1iTnKMgrwOHyyqCd3lFsJKf6GgCeP5xu
AsYsdkF8R2ejH5AkAuPa52Y=
=Sbm9
-END PGP SIGNATURE-

___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


[ilugd] MBlaster II for linux too?

2003-10-27 Thread LinuxLingam
just saw this piece of news on newsforge. i wonder how does this exploit
potentially attack linux and unix users?

***

Windows Vulnerability Could Lead To MSBlaster II
http://www.newsforge.com/article.pl?sid=03/10/27/0353239

Exploit code that takes advantage of a recent Microsoft
vulnerability
is out in the wild and could prove as dangerous as this summer's
MSBlaster worm if attackers decide to focus their efforts, security
analysts said Friday. Released earlier this week, the exploit code
--
which has been crafted to run not only on attackers' Windows
machines,
but also on Linux and Unix boxes --crashes Windows systems not
patched
against a vulnerability released last week. The vulnerability, which
Microsoft rated as 'Critical' when it released several bulletins in
its
first-ever monthly patch roundup, is in the Windows Messenger
Service.
Not to be confused with Windows Messenger, Microsoft's instant
messaging platform, Windows Messenger Service is used by
applications
to communicate with each other, and often by enterprise network
administrators to alert users of such things as impending server
shutdowns or the unavailability of print servers. 

***

LL


___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] MBlaster II for linux too?

2003-10-27 Thread Raj Mathur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

 LL == linuxlingam  [EMAIL PROTECTED] writes:

LL just saw this piece of news on newsforge. i wonder how does
LL this exploit potentially attack linux and unix users?

LL ***

LL Windows Vulnerability Could Lead To MSBlaster II
LL http://www.newsforge.com/article.pl?sid=03/10/27/0353239

LL Exploit code that takes advantage of a recent Microsoft
LL vulnerability is out in the wild and could prove as dangerous
LL as this summer's MSBlaster worm if attackers decide to focus
LL their efforts, security analysts said Friday. Released earlier
LL this week, the exploit code -- which has been crafted to run
LL not only on attackers' Windows machines, but also on Linux and
LL Unix boxes --crashes Windows systems not patched against a
LL vulnerability released last week. The vulnerability, which
LL Microsoft rated as 'Critical' when it released several
LL bulletins in its first-ever monthly patch roundup, is in the
LL Windows Messenger Service.  Not to be confused with Windows
LL Messenger, Microsoft's instant messaging platform, Windows
LL Messenger Service is used by applications to communicate with
LL each other, and often by enterprise network administrators to
LL alert users of such things as impending server shutdowns or
LL the unavailability of print servers.

I'd take the assertions about a single virus running on Winduhs, Linux
and Unix (what's that, anyway?) with large handfuls of salt.  The
author needs either substantiate his/her claim with references or,
more likely, go off the crack for a while.

Regards,

- -- Raju
- -- 
Raj Mathur[EMAIL PROTECTED]  http://kandalaya.org/
   GPG: 78D4 FC67 367F 40E2 0DD5  0FEF C968 D0EF CC68 D17F
  It is the mind that moves
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.6 and Gnu Privacy Guard http://www.gnupg.org/

iD8DBQE/nVrGyWjQ78xo0X8RAhZrAJ47y4zrFQwUL5TeZJ+LfJlPn+tRwQCfQ2vZ
xtun9smch5jpUA3eBv7nNMs=
=EKlw
-END PGP SIGNATURE-

___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] MBlaster II for linux too?

2003-10-27 Thread LinuxLingam

 I'd take the assertions about a single virus running on Winduhs, Linux
 and Unix (what's that, anyway?) with large handfuls of salt.  The
 author needs either substantiate his/her claim with references or,
 more likely, go off the crack for a while.
 
 Regards,
 
 - -- Raju
 - -- 


i wonder what the author meant. i doubt he/she meant a single virus, but
an exploit that may exist in both systems.

does linux have an 'equivalent' service such as that infamous windows
meessaging service? this is not be confused with the msn messenger
service, from what i've heard of reports. apparantly, m$ in their great
wisdom created a messaging service so people could 'page' other people
on the net, or let 'applications' send messages back and forth from a
server or other nodes. these messages tend to splash themselves right on
top of all your existing work on a desktop screen in a dialog box,
according to grc.com.

the service is on by default, keeps its own port running.

anyone, over the net, could gain control over a machine using some known
exploits.

what's similar to this service in linux, if at all?

LL


___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd