[rescue] Fair Warning RPC Worm
Daniel de Young
daniel at velvetsea.com
Tue Aug 12 12:30:04 CDT 2003
On Tue, 2003-08-12 at 09:02, Michael A. Turner wrote:
> > On Monday 11 August 2003 23:32, Michael A. Turner wrote:
> > > To let everyone know. There is now an RPC worm
> > running against
> > > windows. We are seeing it here already. It crashes Windows
> > 2000 svchost and
> > > Cause two different errors on Windows XP. Take a peek at
> > slashdot for
> > > running comentary on it and links to better articles.
> > > Just trying to save you guiys some time from phone
> > calls tonight.
> > > Looks like a bad one. Started about 4 hours ago. So
> > anything doing with RPC
> > > services you now have an answer to what is going on.
> > This will be the death of your network :-/
> > --
> > Frank Van Damme http://www.openstandaarden.be
> Lcukly I was able to convience people around here that patch was
> important. I put it on all the servers the day after it came out. After the
> reaming we took from code red, Nimda, and the SQL slammer worm even my boss
> found it a good idea to install that patch.
> Today I am chasing the users who disregarded the E-mail that told
> them to install the patch. Sigh, no way to enforce it and now they are
> whining we should have done more to protect them. Damned if you do, Damned
> if you don't.
Uhm... I can't understand what is so hard about putting a firewall into
that place. One day's work and then you are in a whole different
posture. Unbelievable. At least for your users!
Cripes man!!! This is no way to live!
More information about the rescue