Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Witty Worm Detection

Critical

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote host is vulnerable to a series of remote vulnerabilities to the ISS IDS engine. In addition, network traffic seems to indicate that the machine was compromised by a worm (Witty) which spreads via these ISS vulnerabilities.

Solution

The Witty worm corrupts the victim's hard drive. The victim Operating System must be reinstalled.