RE: [NEW] bugbear_b.nasl

From: larosa, vjay (larosa_vjayat_private)
Date: Tue Jun 10 2003 - 11:10:10 PDT

Next message: Michael Boman: "Nessus doesn't detect F-Secure SSH correctly"

Previous message: Renaud Deraison: "Re: [NEW] bugbear_b.nasl"
Maybe in reply to: Vincent Renardias: "[NEW] bugbear_b.nasl"
Next in thread: larosa, vjay: "RE: [NEW] bugbear_b.nasl"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Okay, we are getting a live copy of the virus in a little bit. The tech has
already cleaned the system I was playing with. I will send you the output as
soon as I can.

vjl

-----Original Message-----
From: Renaud Deraison [mailto:deraisonat_private] 
Sent: Tuesday, June 10, 2003 2:02 PM
To: plugins-writersat_private
Subject: Re: [NEW] bugbear_b.nasl

On Tue, Jun 10, 2003 at 07:53:17PM +0200, Pavel Kankovsky wrote:
> On Tue, 10 Jun 2003, Renaud Deraison wrote:
> 
> > According to the reference in Vincent's plugin, it's possible to launch
> > a web server on an arbitrary port, so I added the plugin, which now
> > looks for every web server, not only port 81.
> 
> Infected hosts I've seen so far had no HTTP port open.
> Perhaps the web server has to be activated explicitly (via 1080?)?

Yes, it has to be (it's what I meant by "it's possible to launch a web
server 
on an arbitrary port")


				-- Renaud

Next message: Michael Boman: "Nessus doesn't detect F-Secure SSH correctly"
Previous message: Renaud Deraison: "Re: [NEW] bugbear_b.nasl"
Maybe in reply to: Vincent Renardias: "[NEW] bugbear_b.nasl"
Next in thread: larosa, vjay: "RE: [NEW] bugbear_b.nasl"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Jun 10 2003 - 11:13:55 PDT