On Tue, Jun 10, 2003 at 07:53:17PM +0200, Pavel Kankovsky wrote: > On Tue, 10 Jun 2003, Renaud Deraison wrote: > > > According to the reference in Vincent's plugin, it's possible to launch > > a web server on an arbitrary port, so I added the plugin, which now > > looks for every web server, not only port 81. > > Infected hosts I've seen so far had no HTTP port open. > Perhaps the web server has to be activated explicitly (via 1080?)? Yes, it has to be (it's what I meant by "it's possible to launch a web server on an arbitrary port") -- Renaud
This archive was generated by hypermail 2b30 : Tue Jun 10 2003 - 11:00:12 PDT