Sasser Worm Exploits MS04-011 Vulnerability

Grok Headline matches for Sasser Worm Exploits MS04-011 Vulnerability

W32.SASSER WORM RELATING TO MS04-011

W32.SASSER WORM RELATING TO MS04-011 05/03/2004 05:59 PM

Dabber worm exploits Sasser flaw

Dabber worm exploits Sasser flaw 05/14/2004 04:49 AM
Computer Weekly May 14 2004 9:08AM GMT

Dabber exploits Sasser flaw

Dabber exploits Sasser flaw 05/14/2004 06:06 AM
Dog eat dog

Sasser.A and Sasser.B Worm Removal Tool
(KB841720)

Sasser.A and Sasser.B Worm Removal Tool
(KB841720) 05/02/2004 10:32 PM
A situation has been identified where the Sasser.A or Sasser.B worms could have infected some systems before the application of MS04-011 [KB835732]. This tool will help remove the Sasser.A and Sasser.B worms from these systems. For systems with MS04-011 [KB835732], no further action is needed once this tool is installed. Install this tool to help remove this worm from your PC.

Potential Microsoft PCT worm (MS04-011)

Potential Microsoft PCT worm (MS04-011) 04/23/2004 04:10 PM
advisories (Apr 23 2004)

Sasser Worm (W32.Sasser.A and its
variants)

Sasser Worm (W32.Sasser.A and its
variants) 05/05/2004 06:56 AM
Sasser Worm (W32.Sasser.A and its variants)
http://ww w.microsoft.com/security/incident/sasser.asp

What you should know about the Sasser worm and Its Variants. Microsoft teams have confirmed that the Sasser worm (W32.Sasser.A and its variants) is currently circulating on the Internet. Microsoft has verified that the worm exploits the Local Security Authority Subsystem Service (LSASS) issue that was addressed by the security update released on April 13 in conjunction with Microsoft Security Bulletin MS04-011. This has been added to Internet Alerts Subject Tracer™ Information Blog.

Worm Exploits Apache Flaw

Worm Exploits Apache Flaw 07/01/2002 12:36 PM
Worm could allow attacker to gain remote access and launch a denial-of-service attack.

Santy PHP Worm Variant With 50 Exploits
Discovered

Santy PHP Worm Variant With 50 Exploits
Discovered 01/02/2005 02:05 PM

[EXPL] (MS04-031) NetDDE buffer overflow
vulnerability PoC

[EXPL] (MS04-031) NetDDE buffer overflow
vulnerability PoC 12/31/2004 02:14 PM
houseofdabus HOD (Dec 30 2004)

Re: [EXPL] (MS04-031) NetDDE buffer
overflow vulnerability PoC

Re: [EXPL] (MS04-031) NetDDE buffer
overflow vulnerability PoC 12/31/2004 04:35 PM
Steve Friedl (Dec 31 2004)

Microsoft Security Bulletin MS04-020:
Vulnerability in POSIX

Microsoft Security Bulletin MS04-020:
Vulnerability in POSIX 08/10/2004 04:24 PM
Overview
This security vulnerability affects the Microsoft INTERIX® 2.2 product.

System Requirements
Supported Operating Systems: Windows 2000 Service Pack 2, Windows 2000 Service Pack 3, Windows 2000 Service Pack 4, Windows NT

Download: Microsoft Security Bulletin MS04-020: Vulnerability in POSIX Could Allow Code Execution

Read full story...

INTERNET SECURITY: Mydoom Worm Exploits
Yahoo

INTERNET SECURITY: Mydoom Worm Exploits
Yahoo 08/05/2004 05:40 PM
Content-Wire Aug 5 2004 9:39PM GMT

Latest MyDoom worm exploits Web site
guestbooks

Latest MyDoom worm exploits Web site
guestbooks 08/16/2004 07:37 PM
ZDNet Australia Aug 16 2004 11:19PM GMT

New VISA scam exploits IE vulnerability

New VISA scam exploits IE vulnerability 12/26/2003 08:00 PM
Marek Szuba (Dec 23 2003)

10 Month Old Vulnerability Continues to
Be Core For Exploits

10 Month Old Vulnerability Continues to
Be Core For Exploits 06/10/2004 07:23 PM
Drew Copley (Jun 10 2004)

Microsoft Security Bulletin MS04-020:
Vulnerability in POSIX Could Allow Code
Execution

Microsoft Security Bulletin MS04-020:
Vulnerability in POSIX Could Allow Code
Execution 08/11/2004 01:18 AM
A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.

Microsoft Security Bulletin MS04-016:
Vulnerability in DirectPlay Could Allow
Denial of Service (839643)

Microsoft Security Bulletin MS04-016:
Vulnerability in DirectPlay Could Allow
Denial of Service (839643) 07/13/2004 12:00 PM
This update resolves a newly-discovered, privately reported vulnerability. A denial of service vulnerability exists in the implementation of the IDirectPlay4 application programming interface (API) of Microsoft DirectPlay because of a lack of robust packet validation. The vulnerability is documented in the Vulnerability Details section of this bulletin. If a user is running a networked DirectPlay application, an attacker who successfully exploited this vulnerability could cause the DirectPlay application to fail. The user would have to restart the application to resume functionality. Microsoft recommends that customers should consider applying the security update.

Worm unleashed that exploits latest
Windows security holes, Microsoft warns

Worm unleashed that exploits latest
Windows security holes, Microsoft warns 05/02/2004 04:58 PM
The company again urged users to apply the most recent critical updates.

Microsoft Security Bulletin MS04-027:
Vulnerability in WordPerfect Converter
Could Allow Code Execution (884933)

Microsoft Security Bulletin MS04-027:
Vulnerability in WordPerfect Converter
Could Allow Code Execution (884933) 09/15/2004 01:56 AM
This update resolves a newly discovered, privately reported vulnerability. A remote code execution vulnerability exists in the WordPerfect 5.x Converter that is provided as part of the affected software. The vulnerability is documented in the Vulnerability Details section of this bulletin. If a user is logged on with administrative privileges, an attacker who successfully exploited this vulnerability could take complete control of an affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts with full privileges. Users whose accounts are configured to have fewer privileges on the system would be at less risk than users who operate with administrative privileges. However, user interaction is required to exploit this vulnerability.

Microsoft Security Bulletin MS04-017:
Vulnerability in Crystal Reports Web
Viewer Could Allow Information
Disclosure and Denial of Service
(842689)

Microsoft Security Bulletin MS04-017:
Vulnerability in Crystal Reports Web
Viewer Could Allow Information
Disclosure and Denial of Service
(842689) 07/13/2004 12:00 PM
This update resolves a newly-discovered vulnerability in Crystal Reports and Crystal Enterprise from Business Objects. Microsoft Visual Studio .NET 2003 (all versions) and Outlook 2003 with Business Contact Manager redistribute Crystal Reports and are therefore affected by the vulnerability. Microsoft Business Solutions CRM 1.2 redistributes Crystal Enterprise, which is affected in the same way. The vulnerability is documented in the Vulnerability Details section of this bulletin. An attacker who successfully exploited the vulnerability could retrieve and delete files through the Crystal Reports and Crystal Enterprise Web viewers on an affected system. The number of files of files that are impacted by this vulnerability would depend on the security context of the affected component that is used by the Crystal Web viewer.

W32.Sasser.Worm

W32.Sasser.Worm 05/03/2004 01:04 AM
Seems this worm has been making the rounds and causing havoc. Will it ever end. I am relieved that it...

New victims for Sasser net worm

New victims for Sasser net worm 05/04/2004 10:49 AM
Home broadband users could be the next hunting ground for the Sasser Windows worm as it spread across the net.

Will the Sasser worm become the next
Blaster?

Will the Sasser worm become the next
Blaster? 05/01/2004 05:09 PM
kers0r (May 01 2004)

New worm duo follows Sasser route

New worm duo follows Sasser route 05/19/2004 10:35 AM
ZDNet May 19 2004 2:11PM GMT

What You Should Know About the Sasser
Worm and It Variants

What You Should Know About the Sasser
Worm and It Variants 05/03/2004 06:16 PM
Aqui la pagina de Microsoft al respecto .. There's a new worm on the loose .. Sasser worm patch .. strnku

microsoft.com/security/incident/sasser.asp
track this site | 4 links

Re: Will the Sasser worm become the next
Blaster?

Re: Will the Sasser worm become the next
Blaster? 05/01/2004 06:48 PM
Gadi Evron (May 01 2004)

Sasser net worm causes headaches

Sasser net worm causes headaches 05/04/2004 06:24 AM
BBC May 4 2004 9:48AM GMT

Sasser fix spreads worm

Sasser fix spreads worm 05/05/2004 09:54 AM

"What You Should Know About the Sasser
Worm and It Variants"

"What You Should Know About the Sasser
Worm and It Variants" 05/04/2004 05:02 PM

Sasser worm slowing down

Sasser worm slowing down 05/06/2004 02:51 AM
iafrica.com May 6 2004 6:37AM GMT

Yet another Sasser worm appears

Yet another Sasser worm appears 05/11/2004 01:45 PM
A new version of the Sasser Internet worm, Sasser-F, appeared on Monday, despite claims by German authorities to have arrested the sole author of that worm on Friday.

Sasser worm gets to work

Sasser worm gets to work 05/03/2004 08:47 PM
The latest Internet threat debuted over the weekend at a leisurely pace, in part because it was poorly written. But as the work week begins, the business world is seeing signs of trouble.

On the Worm Watch: Sasser

On the Worm Watch: Sasser 05/02/2004 09:55 AM
Windows users beware: The Sasser worm is spreading. And the patch which Microsoft made available to block the hole in Windows which Sasser is exploiting leaves some systems unbootable.

Sasser Worm Disruption Growing

Sasser Worm Disruption Growing 05/04/2004 09:40 AM

Hunt on for Sasser worm culprit

Hunt on for Sasser worm culprit 05/05/2004 09:54 AM

Sasser Worm Snakes Into Windows

Sasser Worm Snakes Into Windows 05/04/2004 05:05 AM
A new worm is infecting the Windows world, striking companies in Europe and the United States, and experts expect another wave of infection Tuesday.

Sasser worm starts its spread

Sasser worm starts its spread 05/01/2004 10:30 AM
A worm starts spreading through the Internet using a vulnerability in widely used component of the Windows operating system.

Sasser worm creates havoc

Sasser worm creates havoc 05/04/2004 05:05 AM
Blaster Mk II hits railways and banks

Sasser worm disrupts millions

Sasser worm disrupts millions 05/04/2004 05:04 AM
The Sasser virus is causing disruption for large numbers of Windows PC users, infecting millions of computers.
Grok Description matches for Sasser Worm Exploits MS04-011 Vulnerability
GrokA matches for Sasser Worm Exploits MS04-011 Vulnerability

Sasser Worm Exploits MS04-011 Vulnerability

The following phrases have been identified by the grok system as matching this entry: