Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Possible NetDevil Scanning, RH Linux 7.1, 7.2, 7.3 and 8.0 End-of-Life - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Possible NetDevil Scanning, RH Linux 7.1, 7.2, 7.3 and 8.0 End-of-Life
Possible NetDevil Scanning



The Internet Storm Center has noted a concurrent rise in scans for ports 901, 902, and 903. This is consistent with the default ports used by the NetDevil (Backdoor-RP) trojan for control, keylogging communication, and file transfer. If anyone monitors outbound traffic to these ports, please notify us: http://isc.sans.org/contact.html


More information on the NetDevil trojan can be found at:



http://securityresponse.symantec.com/avcenter/venc/data/backdoor.netdevil.html


http://vil.nai.com/vil/content/v_99295.htm




Red Hat Linux 7.1, 7.2, 7.3 and 8.0 end-of-life



As per their support policy, RedHat Software has announced that RedHat Linux 7.1, 7.2, 7.3 and 8.0 have reached their errata maintenance end-of-life.



RedHat will no longer be producing security, bugfix, or enhancement updates for these products. Note also, that Red Hat Linux 9 reaches its end of life on April 30, 2004.



Those of you running these systems should consider migrating to newer versions.




-----------------------------------------------------

Handler on Duty: Tom Liston - http://www.labreatechnologies.com
Tom

160 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!