Hi, ----->%-----snip----->%----- > > The message that appeared in the hacked site is down here, and what > was very weirdow was that Norton Antivirus 2000 detected that html > file as a virus. Norton detects hacked web pages? > > The message in teh hacked sites said: > > fuck USA Government > > fuck PoizonBOx > > contact:sysadmcnat_private > ----->%-----snip----->%----- This is the sadmind/IIS worm. It infects Solaris boxes through an old vulnerability, and then uses them to deface IIS machines. Take a look at CERT advisory CA-2001-11, http://www.cert.org/advisories/CA-2001-11.html. Hope this helps, Reverend Lola The Titanium Sheep Provider of Steel Wool __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/
This archive was generated by hypermail 2b30 : Mon Aug 06 2001 - 12:49:52 PDT