Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-21 Thread Karl J. Runge
On Fri, 21 Sep 2001, Benjamin Scott <[EMAIL PROTECTED]> wrote: > On Thu, 20 Sep 2001, Karl J. Runge wrote: > > Consider what happen would if an "execute arbitrary commands" exploit in > > Apache httpd popped up. > > Then attackers would be able to execute arbitrary commands as the "nobody" > us

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-21 Thread Benjamin Scott
On Thu, 20 Sep 2001, Ken Ambrose wrote: > I *absolutely* agree, but we also have one other "secret weapon": > diversity. Indeed. As I told our customers on Wednesday (as we went through the panic for Nimda), people attack Microsoft software because they are the World Trade Center of software c

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-21 Thread Benjamin Scott
On Thu, 20 Sep 2001, Karl J. Runge wrote: > Consider what happen would if an "execute arbitrary commands" exploit in > Apache httpd popped up. Then attackers would be able to execute arbitrary commands as the "nobody" user, which has no access to anything on a proper system. On MS IIS, this

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-20 Thread Rich Cloutier
- Original Message - From: "Jerry Feldman" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: "John Feole" <[EMAIL PROTECTED]> Sent: Friday, September 21, 2001 1:39 AM Subject: Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-20 Thread Ken Ambrose
On Thu, 20 Sep 2001, Jerry Feldman wrote: > We should not gloat over Microsoft's security lapses. While there are > many many security holes in Windows and related products, the sheer > number of installed product makes them by far a prime target. As the > Linux (and BSD) market shares grow, we w

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-20 Thread Karl J. Runge
On Thu, 20 Sep 2001, Jerry Feldman <[EMAIL PROTECTED]> wrote: > We should not gloat over Microsoft's security lapses. While there are > many many security holes in Windows and related products, the sheer > number of installed product makes them by far a prime target. As the > Linux (and BSD) mark

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-20 Thread Jerry Feldman
We should not gloat over Microsoft's security lapses. While there are many many security holes in Windows and related products, the sheer number of installed product makes them by far a prime target. As the Linux (and BSD) market shares grow, we will become targets, and many of our security wea

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-20 Thread John Feole
Benjamin Scott wrote: >On Wed, 19 Sep 2001, Bayard Coolidge USG wrote: > >>My concern today is that we have been at least partially affected by >>this Code virus ... >> > > You mean the Nimda worm/virus? ("Admin" spelled backwards.) This one is >great. It attacks vulnerabilities in MS Outloo

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-19 Thread Alex Hewitt USG
Microsoft has finally put an option into the latest version of Outlook Express (v6) to suppress the opening/saving of email attachments. One of my systems at home runs Win 2k Pro and we are constantly receiving emails from folks whose email handlers have mail forwarding setup to forward email as a

Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-19 Thread Benjamin Scott
On Wed, 19 Sep 2001, Bayard Coolidge USG wrote: > My concern today is that we have been at least partially affected by > this Code virus ... You mean the Nimda worm/virus? ("Admin" spelled backwards.) This one is great. It attacks vulnerabilities in MS Outlook, MS IE, and MS IIS. It mass-e