Re: a dangerous fast spreading (yet simple) trojan horse.

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: a dangerous fast spreading (yet simple) trojan horse.
From: Craig Holmes <Leusent@xxxxxxxxxxxxxxxxxxxxxx>
Date: Mon, 27 Oct 2003 18:30:41 -0400
In-reply-to: <3F9D4B2F.3080903@xxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <000f01c39ced$e5abce50$0900000a@whitestar> <3F9D4B2F.3080903@xxxxxxxxxxx>
Reply-to: leusent@xxxxxxxxxxxx
User-agent: KMail/1.5.3

I also noticed this on irc. I grabbed a copy of the file before it was taken 
off line if anyone has any interest in seeing it:
http://gearbox.gearbolt.net/files/security/cap/britney.jpg
Note that I have commented out the function call that start the exploitation 
to keep anyone from using my box to spread this virus.

Craig Holmes
-- 
KMail: 1.5.3
Linux Weltall.gearbolt.net 2.4.20 #4 Sat Sep 27 18:55:34 EDT 2003 i686 AMD 
Athlon(TM) XP 1800+ AuthenticAMD GNU/Linux

References:
- a dangerous fast spreading (yet simple) trojan horse.
  - From: Gadi Evron
- Re: a dangerous fast spreading (yet simple) trojan horse.
  - From: Andreas Reich

Prev by Date: Remote overflow in thttpd
Next by Date: Nachi/Welchia/LovSan.D version 2 appears to be spreading
Previous by thread: Re: a dangerous fast spreading (yet simple) trojan horse.
Next by thread: Re: a dangerous fast spreading (yet simple) trojan horse.
Index(es):
- Date
- Thread