____________________________________________________________ \ / Scott Fosseen - Systems Engineer - Arrowhead AEA 5 \ www.aea5.k12.ia.us/aeaphone.nsf/Web/FosseenScott /____________________________________________________________ ----- Original Message ----- From: "X-Force" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, October 03, 2002 4:25 PM Subject: ISS Security Brief: Bugbear Hybrid Threat Propagation
> > TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to > [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! > -------------------------------------------------------------------------- - > > -----BEGIN PGP SIGNED MESSAGE----- > > Internet Security Systems Security Brief > October 3, 2002 > > Bugbear Hybrid Threat Propagation > > Synopsis: > > ISS X-Force has been monitoring the spread of the "Bugbear" Internet worm. > Bugbear propagates through email and through open NetBIOS file shares. > Bugbear attempts to disable all security and antivirus software on each host > and installs a backdoor program. X-Force has detected a large increase in > NetBIOS scanning traffic from several thousand unique addresses. > > Impact: > > As with most mass-emailing worms, Bugbear's propagation can cause resource > starvation problems on email servers, and network congestion on heavily > loaded network segments. Information about the nature of the backdoor program > that Bugbear installs has been made public. Therefore, this backdoor can be > accessed not only by the author, but also by any third-party attacker. > > For the complete ISS X-Force Security Advisory, please visit: > http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21301 > ______ > > About Internet Security Systems (ISS) Founded in 1994, Internet Security > Systems (ISS) (Nasdaq: ISSX) is a pioneer and world leader in software > and services that protect critical online resources from an ever- > changing spectrum of threats and misuse. Internet Security Systems is > headquartered in Atlanta, GA, with additional operations throughout the > Americas, Asia, Australia, Europe and the Middle East. > > Copyright (c) 2002 Internet Security Systems, Inc. All rights reserved > worldwide. > > Permission is hereby granted for the electronic redistribution of this > document. It is not to be edited or altered in any way without the > express written consent of the Internet Security Systems X-Force. If you > wish to reprint the whole or any part of this document in any other > medium excluding electronic media, please email [EMAIL PROTECTED] for > permission. > > Disclaimer: The information within this paper may change without notice. > Use of this information constitutes acceptance for use in an AS IS > condition. There are NO warranties, implied or otherwise, with regard to > this information or its use. Any use of this information is at the > user's risk. In no event shall the author/distributor (Internet Security > Systems X-Force) be held liable for any damages whatsoever arising out > of or in connection with the use or spread of this information. > > X-Force PGP Key available on MIT's PGP key server and PGP.com's key > server, as well as at http://www.iss.net/security_center/sensitive.php > > Please send suggestions, updates, and comments to: X-Force > [EMAIL PROTECTED] of Internet Security Systems, Inc. > > > -----BEGIN PGP SIGNATURE----- > Version: 2.6.2 > > iQCVAwUBPZy1dTRfJiV99eG9AQFjLwP/a38N1d2cwdV5bh2xb+W0UtL8WipstsmS > IsvDaAPOXNZWxehoYy4tv8aXuu3quODR1ZP+Agd1qC85JPXyuVWYWI4dY56EC3Kj > SaQW5gXXkkT6oWJEXkuLrtUJzMqPY+H8QdLvuRwClVbVS4/h3g38cv3aKXc63vbV > aD4JXIiRT38= > =/P93 > -----END PGP SIGNATURE----- > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- [This E-mail scanned for viruses by Declude Virus] --------------------------------------------------------- Archived messages from this list can be found at: http://www.mail-archive.com/[email protected]/ ---------------------------------------------------------
