Re: Re: [Security] Newest Symantic Security Software

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Thanks Mike,

I'm thinking long and hard on this one, and it may provoke change.

- -F

>Today there's apparently a new (or resurgence of an old) worm that effects
>people running MS SQL slammer. This is the perfect example of a situation
>where having the sns scanner whitelisted means you can get owned: MSSQL
>uses UDP, so all I have to do is compromise a box on the local subnet, and
>with one frame I've owned your box. Granted, you deserve to be owned for
>not patching....
>
>Mike
>-------------------------------------

- -------------------------------------------------------------------------
Jake F Harwood University of California, Berkeley
Intrusion Detection Team 2484 Shattuck Avenue
                                                 Phone (510)643-8241
                                                 Cell (510)390-2580
"Who is this General Failure and why is he reading my hard drive?" -F

                           Get your free campus security CD: at
http://cab.berkeley.edu
- -------------------------------------------------------------------------

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1

iQEVAwUBQoQM6SIJRNHUFoUuAQIN7Af/b3XsA5QNu7Mpt/CiUUupcarvw7QzCpC0
fZwa5Dds+aY6SOFKC9wbaLrdQLa6tbTZAJcClYnARcd6bv5JiUaWJiId5Zr3vOsl
HtF1SWOFgPf6QVuUKAtGxvwCIKsNJYcodFlw+JY+OxxGTW+VDYx4zMp8iuPymmFM
SMVD1dV8Tq63SXO3L15O3GewtxwJamowwUF/xEd4kH2YJQyrLK4nXdAT8jOx3pOW
Bflk70/5mGx2MUvlkGxIPGXLeBJLYhQPGJFCVkrgFnzOSHzmbnz9Vr1wA6LF8mrA
hFXbKlQrNdcp3SN5y9l/UQi3c1OOOWrC+AnDVxMbKHlwBD6bVYvKyw==
=+5yk
-----END PGP SIGNATURE-----

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
Received on Thu May 12 19:14:35 2005