Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: Port 1025 increase, MS04-11 update problems - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Port 1025 increase, MS04-11 update problems
Microsoft has released a KB article on problems with the MS04-11 update causing problems on some machines including losing the ability to login or failure to respond after rebooting. If you've ran into this problem, or are preparing to deploy MS04-11, you can read up on the problem and the solution here:;EN-US;841382

There's been an increase in Port tcp/1025 activity. NetCat data shows that the increase was from dcom exploit - something included in the Metasploit 2 framework, which could explain the increase. Traffic shows the typical 'MEOW' string.

Handler on Duty, Davis Ray Sickmon Jr

10 Posts
Apr 30th 2004

Sign Up for Free or Log In to start participating in the conversation!