Okay, we are getting a live copy of the virus in a little bit. The tech has already cleaned the system I was playing with. I will send you the output as soon as I can. vjl -----Original Message----- From: Renaud Deraison [mailto:deraisonat_private] Sent: Tuesday, June 10, 2003 2:02 PM To: plugins-writersat_private Subject: Re: [NEW] bugbear_b.nasl On Tue, Jun 10, 2003 at 07:53:17PM +0200, Pavel Kankovsky wrote: > On Tue, 10 Jun 2003, Renaud Deraison wrote: > > > According to the reference in Vincent's plugin, it's possible to launch > > a web server on an arbitrary port, so I added the plugin, which now > > looks for every web server, not only port 81. > > Infected hosts I've seen so far had no HTTP port open. > Perhaps the web server has to be activated explicitly (via 1080?)? Yes, it has to be (it's what I meant by "it's possible to launch a web server on an arbitrary port") -- Renaud
This archive was generated by hypermail 2b30 : Tue Jun 10 2003 - 11:13:55 PDT