Re: NIMDA worm: JavaScript

2001-09-23 Thread burns
On September 22, 2001 11:31 pm, Tim Wunder wrote: Previously, Joel Hammer chose to write: I thought from all I had read about JavaScript that it was designed to be safe. I recall on another list someone said he had downloaded a malicious html doc and others on the list claimed that was

Re: NIMDA worm: JavaScript

2001-09-23 Thread Ken Moffat
On Sun, 23 Sep 2001 10:48:43 -0400 burns [EMAIL PROTECTED] wrote: The worm will also propagate through network shares. It isn't going to activate and infect a Linux client, but a linux client could 'share' it to other Windows boxes on the same network if they are unlucky enough to pull

Re: NIMDA worm: JavaScript

2001-09-23 Thread Bill Day
This does work on its own... I simply loaded the readme.eml and it contained the embedded mime readme.exe(which I never ran or found on linux system) but it does propagate thru network shares and to any writeable directories for the current user. so any samba shares and network connections to

NIMDA worm: JavaScript

2001-09-22 Thread Joel Hammer
I thought from all I had read about JavaScript that it was designed to be safe. I recall on another list someone said he had downloaded a malicious html doc and others on the list claimed that was impossible. This was a long time ago, like 8 months. Anyway, the following update is rather

Re: NIMDA worm: JavaScript

2001-09-22 Thread Tim Wunder
Previously, Joel Hammer chose to write: I thought from all I had read about JavaScript that it was designed to be safe. I recall on another list someone said he had downloaded a malicious html doc and others on the list claimed that was impossible. This was a long time ago, like 8 months.

Re: NIMDA worm: JavaScript

2001-09-22 Thread Joel Hammer
Hi Joel, I didn't see anything in the advisory pertaining to Samba, was that something you just got from the samba list? There is mention that the infected clients will attempt to spread the worm: from client to client via open network shares This includes samba. I don't think there is