CISCO 小烏龜出現後門導致被攻擊

[阿 土]

CISCO 小烏龜出現後門導致被攻擊
只要是開啟WEB的,都會遭受DOS攻擊..CISCO網站有最新FIREWARE更新..

It appears that Cisco 675 DSL routers have issues with this worm. Many are listing that if the web interface is disabled, you should be fine.

From a posting I found, this is not true.

He states that disabling the web interface prevents interaction with the router config, but the system still parses the input on port 80. (this in turn locks up the box)

His workaround is to disable the web-admin interface and change its port number with "set web port xxxx" (random port)

I have written the original author of this post in hopes I can quote him directly.

http://www.snort.org
http://www.incidents.org/diary/diary.php
http://www.cisco.com/warp/public/707...multiple.shtml

還有下面這個,這是人家公布的已被這個Red Worm破掉的Host list
http://hcity.net/~nomad/.comp-host-list.txt