Re: AIM Backdoor?

From: Virus Attack! - Incidents (incidentsat_private)
Date: Wed Apr 10 2002 - 13:50:23 PDT

Next message: Jeff: "Re: iPlanet Server vulnerable to HTTP TCP HEAD Attack"

Previous message: quentynat_private: "Re: Redhat 6.2 Honeypot Hacked"
In reply to: Chris Brenton: "Re: AIM Backdoor?"
Next in thread: Ralph Los: "RE: AIM Backdoor?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Those are old news! ;-) Check out this link:

http://www.informationweek.com/story/IWK20010927S0021

You can surf to Google, search for 'free.aol.com', and Ąvoilá! You'll get
more information about this threat. Anyway, there's not official answer
about this 'intrusion' in AOL user's computers in the results pages.

Best regards,

Ignacio M. Sbampato
Virus Attack!, Argentina
http://www.virusattack.com.ar


----- Original Message -----
From: "Chris Brenton" <cbrentonat_private>
To: <mikedat_private>
Cc: <incidentsat_private>
Sent: Tuesday, April 09, 2002 5:44 PM
Subject: Re: AIM Backdoor?


> mikedat_private wrote:
> >
> > Anyone care to verify my findings or find a CSS vulnerability on
> > free.aol.com?
>
> Confirmed on IE version 6. Tried this on a test machine and
> http://free.aol.com gets added to the list of "trusted" sites without
> any mention of the modification during the install.
>
> HTH,
> C
> --
> **************************************
> cbrentonat_private
>
> find / -name \*yourbase\* -exec chown us:us {} \;
>
> --------------------------------------------------------------------------
--
> This list is provided by the SecurityFocus ARIS analyzer service.
> For more information on this free incident handling, management
> and tracking system please see: http://aris.securityfocus.com
>
>


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Jeff: "Re: iPlanet Server vulnerable to HTTP TCP HEAD Attack"
Previous message: quentynat_private: "Re: Redhat 6.2 Honeypot Hacked"
In reply to: Chris Brenton: "Re: AIM Backdoor?"
Next in thread: Ralph Los: "RE: AIM Backdoor?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Apr 11 2002 - 08:26:30 PDT