SecurityFocus

New LSASS-based worm finally here (Sasser) May 01 2004 08:09PM
Ben Ryan (ben bssc edu au) (1 replies)

Re: New LSASS-based worm finally here (Sasser) May 03 2004 08:45AM
Javier Fernandez-Sanguino (jfernandez germinus com) (1 replies)

Re: [Full-Disclosure] Re: New LSASS-based worm finally here (Sasser) May 04 2004 02:42AM
Jason (security brvenik com) (1 replies)

Javier Fernandez-Sanguino wrote:

[...]

>
> [1] Approaching the record of worms in other OS, which, I believe, is
> held by Scalper (10 days from patch to worm). But hey, they could browse
> the source changes for that one.
>

It did not attack an OS directly but I believe the witty worm [1] holds
the record to date. A 1 day window from advisory to release, it attacked
and destroyed a security component that was supposed to protect against
these issues...

[1] - http://www.caida.org/analysis/security/witty/

[ reply ]

Re: [Full-Disclosure] Re: New LSASS-based worm finally here (Sasser) May 04 2004 08:28AM
Javier Fernandez-Sanguino (jfernandez germinus com)