M$ vulnerability question

foodog plug-discuss@lists.plug.phoenix.az.us
Wed, 13 Mar 2002 16:33:13 -0700


I haven't received it ("Gibe worm") but here's a story 'bout it:

http://zdnet.com.com/2100-11-853235.html

Summary: benign, mass-mailer worm written in VB.  Microsoft *never*
mails security updates or executable attachments. 

Steve
Lemony-fresh victory is mine! - Zim

"John (EBo) David" wrote:
> 
> I'm not trying to start another flame war, so please do not start...
> 
> I was seriously wondering if everyone else is getting the following
> message including the attachment.  I've got 4 seperate copies in my
> inbox, and got to thinking that I wonder if the attachment might
> actually be a virus.  It would be trivial for someone to attach a virus
> and spoof the header and use that to ship/install a trojan/worm/virus.
> 
> As I NEVER run any attachments except those from REALLY trusted
> individuals, I thought I would ask what you all know of this one.  Do
> you really think this is lagit?
> 
>   EBo --
> 
> > Microsoft Customer,
> >
> >      this is the latest version of security update, the
> > known security vulnerabilities affecting Internet Explorer and
> > MS Outlook/Express as well as six new vulnerabilities, and is
> > discussed in Microsoft Security Bulletin MS02-005. Install now to
> > protect your computer from these vulnerabilities, the most serious of which
> > could allow an attacker to run code on your computer.
> >
> >
> > Description of several well-know vulnerabilities:
> >
> > ...
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
> 
> PLUG-discuss mailing list  -  PLUG-discuss@lists.plug.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss