Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: InfoSec Handlers Diary Blog - Internet Storm Center Diary 2004-01-14 InfoSec Handlers Diary Blog

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Possible NetDevil Scanning, RH Linux 7.1, 7.2, 7.3 and 8.0 End-of-Life

Published: 2004-01-14
Last Updated: 2004-01-15 00:22:25 UTC
by Tom Liston (Version: 1)
0 comment(s)
Possible NetDevil Scanning

The Internet Storm Center has noted a concurrent rise in scans for ports 901, 902, and 903. This is consistent with the default ports used by the NetDevil (Backdoor-RP) trojan for control, keylogging communication, and file transfer. If anyone monitors outbound traffic to these ports, please notify us:

More information on the NetDevil trojan can be found at:

Red Hat Linux 7.1, 7.2, 7.3 and 8.0 end-of-life

As per their support policy, RedHat Software has announced that RedHat Linux 7.1, 7.2, 7.3 and 8.0 have reached their errata maintenance end-of-life.

RedHat will no longer be producing security, bugfix, or enhancement updates for these products. Note also, that Red Hat Linux 9 reaches its end of life on April 30, 2004.

Those of you running these systems should consider migrating to newer versions.


Handler on Duty: Tom Liston -
0 comment(s)
Diary Archives