[Dshield] New one?

security@admin.fulgan.com security at admin.fulgan.com
Thu Oct 18 07:44:09 GMT 2001


TM> Oh crap - looks like it's trying the standard directory traversal with a
TM> twist, BUT... what's significant is that it looks like it's coming from a
TM> Winblows 98 box!

Why ?? Anything that can create a TCP connection could have sent that
string....


TM> If there's a new bug infecting 98 that does this that's gonna be one massive
TM> DOS attack.

More likely some punk with a 98 machine or a forged string... Could
also simply be a zombi...

Good luck,
Stephane




More information about the list mailing list