[Snort-users] Malware Identified (window size 55808)

Michael Wright michael.wright at ...9533...
Sat Jun 21 09:14:02 EDT 2003


Finally the bug has been identified, whose only known signature was a window
size of 55808.  First dubbed a Trojan, it has been downgraded to a "mapping
tool."  It carries no payload, therefore is not immediately dangerous (but
appears to be easily upgraded with additional code).

It appears that it currently infects only Linux boxes but again, could be
easily upgraded with additional code.


Michael Wright


PGP Key ID:  0x4DCFCE57

More information about the Snort-users mailing list