Detections
Analytics
MS Blaster Worm (msblast.exe) Infection Detection
critical Nessus Plugin ID 11818
Synopsis
The remote host is infected by a virus.Description
The remote host seems to be infected by the MS Blaster worm, or the Nachi worm, which may make this host attack random hosts on the internet.Solution
Refer to the vendor advisory.See Also
http://www.nessus.org/u?fd1eaf53
http://www.nessus.org/u?f3142b29
http://www.nessus.org/u?da30e251
http://www.nessus.org/u?2fc4cd93
http://www.nessus.org/u?992052f0
http://www.nessus.org/u?fbaee702
http://www.nessus.org/u?bafd137c
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2003/ms03-039
Plugin Details
Severity: Critical
ID: 11818
File Name: smb_msblast.nasl
Version: 1.28
Type: local
Agent: windows
Family: Windows
Published: 8/11/2003
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
Required KB Items: SMB/name, SMB/login, SMB/password, SMB/registry_access
Reference Information
MSFT: MS03-039
MSKB: 824146