Re: Linux Slapper Worm and Linksys

From: Johannes Ullrich (jullrichat_private)
Date: Thu Sep 19 2002 - 08:51:47 PDT

  • Next message: gobblesat_private: "[Full-Disclosure] Fwd: Save a bug, jail a blackhat"

    James Williams" <jwilliamsat_private> wrote:
    
    > Has anybody heard of or seen the Slapper worm DoS a Linksys SOHO router
    > out of commission? A co-worker whose machine had been infected over the
    > weekend had his linksys router die over the same period that his box had
    > been infected with the worm. I know that Nimda had a similar affect on
    > the Cisco 67x Series ADSL routers running a certain firmware revision and
    > I was wondering if the Slapper had a similar affect with the Linksys SOHO
    > routers.
    
    The slapper worm can generate a lot of udp traffic while chatting
    with its peers. This could just clock the line or overload one
    of the smaller routers.
    
    
    -- 
    --------------------------------------------------------------------
    jullrichat_private             Collaborative Intrusion Detection
                                             join http://www.dshield.org
    
    
    



    This archive was generated by hypermail 2b30 : Thu Sep 19 2002 - 11:10:33 PDT