Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-21 Thread Karl J. Runge
On Fri, 21 Sep 2001, Benjamin Scott [EMAIL PROTECTED] wrote: On Thu, 20 Sep 2001, Karl J. Runge wrote: Consider what happen would if an execute arbitrary commands exploit in Apache httpd popped up. Then attackers would be able to execute arbitrary commands as the nobody user, which has

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-21 Thread Benjamin Scott
On Thu, 20 Sep 2001, Karl J. Runge wrote: Consider what happen would if an execute arbitrary commands exploit in Apache httpd popped up. Then attackers would be able to execute arbitrary commands as the nobody user, which has no access to anything on a proper system. On MS IIS, this leads

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-21 Thread Benjamin Scott
On Thu, 20 Sep 2001, Ken Ambrose wrote: I *absolutely* agree, but we also have one other secret weapon: diversity. Indeed. As I told our customers on Wednesday (as we went through the panic for Nimda), people attack Microsoft software because they are the World Trade Center of software

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-20 Thread Jerry Feldman
We should not gloat over Microsoft's security lapses. While there are many many security holes in Windows and related products, the sheer number of installed product makes them by far a prime target. As the Linux (and BSD) market shares grow, we will become targets, and many of our security

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-20 Thread Karl J. Runge
On Thu, 20 Sep 2001, Jerry Feldman [EMAIL PROTECTED] wrote: We should not gloat over Microsoft's security lapses. While there are many many security holes in Windows and related products, the sheer number of installed product makes them by far a prime target. As the Linux (and BSD) market

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-20 Thread Ken Ambrose
On Thu, 20 Sep 2001, Jerry Feldman wrote: We should not gloat over Microsoft's security lapses. While there are many many security holes in Windows and related products, the sheer number of installed product makes them by far a prime target. As the Linux (and BSD) market shares grow, we will

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-20 Thread Rich Cloutier
- Original Message - From: Jerry Feldman [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: John Feole [EMAIL PROTECTED] Sent: Friday, September 21, 2001 1:39 AM Subject: Re: Nimda worm/virus attacks Microsoft systems (was: What happened?) We should not gloat over Microsoft's security lapses

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-20 Thread John Feole
Benjamin Scott wrote: On Wed, 19 Sep 2001, Bayard Coolidge USG wrote: My concern today is that we have been at least partially affected by this Code color virus ... You mean the Nimda worm/virus? (Admin spelled backwards.) This one is great. It attacks vulnerabilities in MS Outlook, MS

Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-19 Thread Benjamin Scott
On Wed, 19 Sep 2001, Bayard Coolidge USG wrote: My concern today is that we have been at least partially affected by this Code color virus ... You mean the Nimda worm/virus? (Admin spelled backwards.) This one is great. It attacks vulnerabilities in MS Outlook, MS IE, and MS IIS. It

Re: Nimda worm/virus attacks Microsoft systems (was: What happened?)

2001-09-19 Thread Alex Hewitt USG
Microsoft has finally put an option into the latest version of Outlook Express (v6) to suppress the opening/saving of email attachments. One of my systems at home runs Win 2k Pro and we are constantly receiving emails from folks whose email handlers have mail forwarding setup to forward email as