Slashdot Mirror
A Worm's Worm
Carnildo writes "There's a new worm out, according to the Register, but one with a twist. This one, called 'Dabber', infects computers by exploiting a security hole in the Sasser worm."
← Back to Stories (view on slashdot.org)
Jeez, they never fully test these worms before release. No wonder they'd have security issues.
Since when has this country used intellectual elite as a pejorative term?
Worm writers have got to start taking security more seriously.
This is an all new low. Now virus programmers will have to make their virus's better so they dont get infected by another virus.
I think everyone should go ultra secure, the best firewall ever... Disconnect from the net. It would make this all alot easier on us.
snowulf.com
Christ, doesn't anyone do any qc these days?
...we need to stop relying on thrid-party worms, we need Micro-Soft certified worms to ensure our securtity....
Windows is only $500 if your time is worthless.
So now worms come with hooks for third party plug-in's?
Would that make the security flaw a ::cough:: "Wormhole"?
The author in response to the news announce that he will be releasing Service Pack 1 within the next week. Make sure to set up your computer to get updates automatically from update.sasser.com.
Microsoft Security Bulletin MS05-014
Security Update for Microsoft Windows (93212)
Issued: May 14, 2004
Updated: May 14, 2004
Version: 1.0
Summary
Who should read this document: Customers who use the Sasser worm
Impact of vulnerability: Remote Code Execution
Maximum Severity Rating: Critical
Recommendation: Customers running the Sasser worm should apply the update immediately to be protected from Dabber.
Security Update Replacement: This bulletin replaces several prior security updates. See the frequently asked questions (FAQ) section of this bulletin for the complete list.
Caveats: The security update is for Windows 2000, XP Pro and Home, and Windows 2003 server platforms. As a prerequisite, the security update requires your system be infected with Sasser.
To download the Sasser worm, please open Outlook Express or Outlook 2000/XP and execute any attachements you have recieved from unknown senders. If you are not using Sasser you do not need to install this update.
Once installed your system will be immune from being infected with Dabber which exploits a flaw in the widely popular Sasser worm.
Tested Software and Security Update Download Locations:
Affected Software:
Microsoft Windows 2000 Service Pack 2, Microsoft Windows 2000 Service Pack 3, and Microsoft Windows 2000 Service Pack 4 - Download the update
Microsoft Windows XP and Microsoft Windows XP Service Pack 1 - Download the update
Microsoft Windows XP 64-Bit Edition Service Pack 1 - Download the update
Microsoft Windows XP 64-Bit Edition Version 2003 - Download the update
Microsoft Windows Server(TM) 2003 - Download the update
Microsoft Windows Server 2003 64-Bit Edition - Download the update
it's the worm that gets exploited.
In computing are the windows the ones with worms, not the apples.
- if you have windows, type, "format C:"
- if you have linux, or Mac OSX, type "su if you have a pre-OSX Mac, get someone to translate the above commands for you
That'll take care of the folks who don't patch or use a firewall or AV. I figure anyone smart enough to do that won't run the commandsSomething like a rear entry into bonzi buddies behind?
yeah, kinda like a dictator being replaced by one that's even worse. i can just feel the revolution on my harddisk taking place...
People replying to my sig annoy me. That's why I change it all the time.
a post with the title "clever" and the text "very clever" in a story about a "worm's worm" moderated as "redundant".
It's like rain on a rainy day.
meep
You know, Blaster and Sasser seemed at first to be really creative. But think he/she is just riding on Windows coattails.
"I use a Mac because I'm just better than you are."
So where do I doenload the patch so my Sasser isn't vulnerable?
itadakimasu
I told you not to try Sasser, it's a gateway worm! IT LEADS TO HARDER, MORE DANGEROUS WORMS!
Are you secure enough in your masculinity to run 'man touch'?
I wonder if the author of the author of Dabber has violated the DMCA by circumventing a copyright protection system -- i.e., the code to the Sasser worm.
More specifically, I wonder if the author of Sasser can sue the author of Dabber for statutory damages of up to "$2,500 per act of circumvention."
Only Women Bleed (Sex, Sharia remix)
No, to stick with tradition, these should be called termites. Who do you think you are, suggesting windows can have worms, upsetting the delicate balance of the oh-so-perfect english language?
Just thought about this... With the huge number of machines out there "infected" by spyware, adware and similar programs (and many of them without their users even knowing), how long will it be until a worm is written that exploits a vulnerability in one of these programs?
Gimme a sec.
sure it could have been planned...
Coming soon....
http://www.sasser-plugins.com
the jews are gonna be upset about losing those bagels....
Only use worms that are Microsoft Security Hole Certified!
Program code so advanced it travels through worm holes!
*rimshot*
CAn'T CompreHend SARcaSm?
Have the authors of Sasser released a patch to fix this vulnerability yet? I checked sasserupdate.com and nothing's been posted yet.
Hear recorded Slashdot headlines on your phone! New service beta testing. Just call (248) 434-5508
A TCP port is any port through which they ship the illegal drug TCP, of course. Everyone knows that.
- None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
Computer Science Education is about producing scientists not programmers who can develop a product. You should be banished to Devry.
UNCLEAN!!!!! UNCLEAN!!!!!
if only it had been moderated redundant twice..
-ashot
This reminds me of a poem I heard when I was a kid. I'm not sure who the original author is.
Every flea has a flea
on his back to bite him.
And on that flea another flea
so ad infinitum.
MM
--
By including this sig, the copyright holders of this work or collection unreservedly place it in the public domain.
Well, the fact is that Sasser JUST PLAIN WORKS, whereas Linux is a nightmare to install. Furthermore, Sasser is ready for the desktop. Joe Sixpack understands Sasser because it's just like all the other worms etc etc...