NIMDA - ceased ? -

From: Tomo (tomo@c-wind.com)
Date: Wed Dec 25 2002 - 09:00:00 PST

Next message: Mathias Wegner: "Re: RPAT - Realtime Proxy Abuse Triangulation"

Previous message: Charles.Faschingat_private: "RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second"
Next in thread: Neil Dickey: "Re: NIMDA - ceased ? -"
Next in thread: James C. Slora Jr.: "Re: NIMDA - ceased ? -"
Reply: Neil Dickey: "Re: NIMDA - ceased ? -"
Reply: Johannes Ullrich: "Re: NIMDA - ceased ? -"
Reply: Roger Thompson: "Re: NIMDA - ceased ? -"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi, all.

Is NIMDA ...(GET /scripts/..%252f../winnt/system32 ...something)
ceased ?
04:54, Dec. 23 UTC is the last access of them, around here.

Any comments ?

--- Tomo

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Mathias Wegner: "Re: RPAT - Realtime Proxy Abuse Triangulation"
Previous message: Charles.Faschingat_private: "RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second"
Next in thread: Neil Dickey: "Re: NIMDA - ceased ? -"
Next in thread: James C. Slora Jr.: "Re: NIMDA - ceased ? -"
Reply: Neil Dickey: "Re: NIMDA - ceased ? -"
Reply: Johannes Ullrich: "Re: NIMDA - ceased ? -"
Reply: Roger Thompson: "Re: NIMDA - ceased ? -"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Dec 27 2002 - 09:51:42 PST