RE: Virus Outbreak Attacking MS05-039
Paul Schmehl <[email protected]>
| Newsgroups | gmane.comp.security.virus |
|---|---|
| Message-ID | <[email protected]> |
--On Monday, August 15, 2005 20:00:12 +0200 Meni Milstein <[email protected]> wrote: > As far as I know, if you are firewalled correctly and have your 445 tcp > port shut to the outside - this thing should NOT be able to get in. > Am I wrong? > This is almost word for word what people said about Slammer. Then it got in.... It only takes one "rogue" machine, that gets infected while *outside* your network, to connect to your network, and you're toast. Apply the patches ASAP and make sure you have sensible protections in place. Then prepare to quickly cut off any machines that show indications of being infected. Otherwise you're just asking for trouble. Paul Schmehl ([email protected]) Adjunct Information Security Officer University of Texas at Dallas AVIEN Founding Member http://www.utdallas.edu/ir/security/