OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: cuebot-d infection method

From: Jeff Bryner (jbryner1yahoo.com)
Date: Wed Aug 24 2005 - 18:17:27 CDT


> "W32/Cuebot-D attempts to spread using a variety of techniques
> including the exploitation of the PnP vulnerability (MS05-039)."
> ... from my reading of it, there multiple attack vectors involved

Yes, thanks for reading me the link I provided ;-) I *did* read all
tabs on the links and did google for other references. I guess I should
have stated that...oh well no worries.

I was looking for more detail from those who had actually delt with
this specific beast about what the other 'variety of techniques' were
besides the ms05-039 vulnerability. Thanks to those who responded with
their stories.

FYI in case you run into this here is my story. It seems the machines
in my case had been attached to an unprotected network and were
unpatched against ms05-039. When they attached to the production
network, whammo. Old scenario, new worm.

Thanks again, case closed.

Jeff.