Malware : Korgo worm detection

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 145615 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.12252

Categoría: Malware

Título: Korgo worm detection

Resumen: The remote host is probably infected with Korgo worm.;; It propagates by exploiting the LSASS vulnerability on TCP port 445; (as described in Microsoft Security Bulletin MS04-011); and opens a backdoor on TCP ports 113 and 3067.

Descripción: Summary:
The remote host is probably infected with Korgo worm.

It propagates by exploiting the LSASS vulnerability on TCP port 445
(as described in Microsoft Security Bulletin MS04-011)
and opens a backdoor on TCP ports 113 and 3067.

Solution:
- Disable access to port 445 by using a firewall

- Apply Microsoft MS04-011 patch.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Copyright Copyright (C) 2004 David Maciejak

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.12252
Categoría:	Malware
Título:	Korgo worm detection
Resumen:	The remote host is probably infected with Korgo worm.;; It propagates by exploiting the LSASS vulnerability on TCP port 445; (as described in Microsoft Security Bulletin MS04-011); and opens a backdoor on TCP ports 113 and 3067.
Descripción:	Summary: The remote host is probably infected with Korgo worm. It propagates by exploiting the LSASS vulnerability on TCP port 445 (as described in Microsoft Security Bulletin MS04-011) and opens a backdoor on TCP ports 113 and 3067. Solution: - Disable access to port 445 by using a firewall - Apply Microsoft MS04-011 patch. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2004 David Maciejak