Nimda worm (Re: [Gllug] Code Blue)
Lee Blackwell
lee_blackwell at eur.3com.com
Wed Sep 19 12:52:57 UTC 2001
Nimda, = Admin (backwards)
--
Lee Blackwell
Unix Specialist, NCS, 3com IT.
"You're just jealous because the voices are talking to me."
On Wed, 19 Sep 2001, jim wrote:
>
> The "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" thing
> is not Code Blue after all, it's a new one variously known as Nimda, Code
> Rainbow and Concept Virus v.5 . Info on Bugtraq and Slashdot.
>
> What sort of a name is Nimda anyway? Acronym? "Not In My Data ... Apache"?
>
> jim
> --
> http://madeira.physiol.ucl.ac.uk/people/jim/
> "... I naturally gravitated to London, that great cesspool into which all
> the
> loungers and idlers of the Empire are irresistibly drained."
> - Sir Arthur Conan Doyle, "A Study in
> Scarlet"
>
>
> --
> Gllug mailing list - Gllug at linux.co.uk
> http://list.ftech.net/mailman/listinfo/gllug
>
--
Gllug mailing list - Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug
More information about the GLLUG
mailing list