More on the Worm

[Aj Effin Reznor <aj () reznor com>]

Seems this may also be hitting somehow on/over SAMBA.

A colleague (Alien8) had this to say about his SGI Indy
with SAMBA running:

"I started seeing a printout (w/no actual print command) 
of the file (not sure why) and realized it was coming 
from my indy... there was all sorts of traffic so i ran 
tcpdump, and then turned off samba alltogether and it 
nearly disappeared (the traffic)"



-aj.



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com