All things related to multicast

["Marshall Eubanks" <>]

On Tue, 27 Jul 2004 17:07:13 +0200 (CEST)
 

 wrote:
> (re-sent with Subject-field filled to avoid spam filtering)
> 
> Hello,
> 
> I am a student at the Ecole Nationale Supérieure des Télécommunications de
> Paris (www.enst.fr) and I am conducting researches about worms.
> 
> I discovered your thread about MSDP worm attacks on
> http://www.atm.tut.fi/list-archive/mboned/msg01553.html . The problem is
> that I cannot find any multicast-scanning worm on the 3 periods mentionned
> (05/29/2003, 06/21-22/2003, 07/12-13/2003); the only such worms I know
> about are Ramen, Slammer and Sasser.D, but not at these periods.

There was also Saphire - or what that the same as Slammer ?

At any rate, I do not think that these particular attacks were ever
linked to any specific worm - I am cc'ing the Multicast WG list to 
see if anyone else can add more.

Regards
Marshall


> 
> May you please tell me which worm(s) it was, or was it something else
> (e.g. MS03-022 vulnerability in nsiislog.dll re:Windows Media Services
> multicast capabilities, released 06/25/2003) ?
> 
> Thank you
> Nicolas Duvinage