Port 5000 Traffic

18/05/2004 - 00:41 por anonymous | Informe spam
De: "Don" <dbuenaventura@mvps.org>
Asunto: High Port 5000 Traffic Indicates Kibuv.b Worm At Work
Fecha: lunes, 17 de mayo de 2004 20:54

Symantec's DeepSight Threat network Monday detected a very high level of
unusual traffic on TCP port 5000 that indicates a worm's at work.

The latest alert, which notes "extremely heavy activity" on port 5000, is
"almost certainly a worm-related activity," said Alfred Huger, the vice
president of engineering for Symantec's virus watch group.

The suspected culprit is the Kibuv.b worm, which hit the Internet over the
weekend and exploits a vulnerability in Windows' Universal Plug and Play
(UPnP) service within Windows 98, Me, and XP. The UPnP vulnerability was
first disclosed and patched in late 2001.

"Kibuv.b is taking advantage of a long-ago-patched vulnerability," said
Huger, "but we don't consider it a critical threat at the moment."

http://www.techweb.com/wire/story/TWB20040517S0005


Regards,

Don
Track or post software updates at
http://www.dozleng.com/updates/inde...t=calendar
 

Leer las respuestas

#1 Marc [MVP Windows]
19/05/2004 - 00:05 | Informe spam
Thxs.


Saludos

Marc
MCP - MVP Windows Shell/User
Oracle9i Certified Associate (OCA)
NOTA. Por favor, las preguntas y comentarios en los grupos, así nos beneficiamos todos.

Este mensaje se proporciona "como está" sin garantías de ninguna clase, y no otorga ningún derecho.
This posting is provided "AS IS" with no warranties, and confers no rights. You assume all risk for your use.

"anonymous" ón.microsoft.com> escribió en el mensaje news:ef$

De: "Don"
Asunto: High Port 5000 Traffic Indicates Kibuv.b Worm At Work
Fecha: lunes, 17 de mayo de 2004 20:54

Symantec's DeepSight Threat network Monday detected a very high level of
unusual traffic on TCP port 5000 that indicates a worm's at work.

The latest alert, which notes "extremely heavy activity" on port 5000, is
"almost certainly a worm-related activity," said Alfred Huger, the vice
president of engineering for Symantec's virus watch group.

The suspected culprit is the Kibuv.b worm, which hit the Internet over the
weekend and exploits a vulnerability in Windows' Universal Plug and Play
(UPnP) service within Windows 98, Me, and XP. The UPnP vulnerability was
first disclosed and patched in late 2001.

"Kibuv.b is taking advantage of a long-ago-patched vulnerability," said
Huger, "but we don't consider it a critical threat at the moment."

http://www.techweb.com/wire/story/TWB20040517S0005


Regards,

Don
Track or post software updates at
http://www.dozleng.com/updates/inde...t=calendar




Preguntas similares