RE: new pop3 exploit out?

From: leon (leonat_private)
Date: Fri Oct 05 2001 - 17:22:24 PDT

Next message: Valdis.Kletnieksat_private: "Re: new pop3 exploit out?"

Previous message: John Hall: "Re: Weird DNS scans"
Next in thread: Ray: "repeated zone transfer denied"
Next in thread: Alvaro Soto: "RE: new pop3 exploit out?"
Reply: Ray: "repeated zone transfer denied"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I don't believe that.  They still need your screen name to exploit any
of the vulnerabilities associated with that.  Probing port 5190 does not
reveal any of that information.

Cheers,

Leon

-----Original Message-----
From: Valdis.Kletnieksat_private [mailto:Valdis.Kletnieksat_private] 
Sent: Friday, October 05, 2001 8:19 PM
To: leon
Cc: incidentsat_private
Subject: Re: new pop3 exploit out? 

On Fri, 05 Oct 2001 16:03:09 EDT, leon <leonat_private>  said:
> I keep getting scanned on various ports (the usual 80, 23, 5190? I
know
> it is aim but not sure why people are looking for it) upon scanning
the

They're looking for AIM because a buffer overflow was found earlier this
week.

-- 
				Valdis Kletnieks
				Operating Systems Analyst
				Virginia Tech



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Valdis.Kletnieksat_private: "Re: new pop3 exploit out?"
Previous message: John Hall: "Re: Weird DNS scans"
Next in thread: Ray: "repeated zone transfer denied"
Next in thread: Alvaro Soto: "RE: new pop3 exploit out?"
Reply: Ray: "repeated zone transfer denied"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sat Oct 06 2001 - 11:21:15 PDT