Joined: Fri May 09, 2003 5:10 am Posts: 2930 Location: Maryland, USA
|
|
Not really an IRIX security problem, but it might help to know:
Description
- -------------------------------------------------------------------------------------
SGI has released an advisory indicating that the W32/Sasser-A worm described in TruSecure Alert 7608 propagates over the same port (5554/tcp) used by the SGI Embedded Support Partner (ESP). The ESP web server is enabled by default on systems running SGI IRIX. As a result, virus detection applications that scan for infections based on port activity may report an infection on IRIX systems running ESP.
Impact
- -------------------------------------------------------------------------------------
This issue could cause virus detection software and port scanners to incorrectly determine that SGI IRIX systems running ESP are infected by W32/Sasser-A or its variants.
Patches/Software
- -------------------------------------------------------------------------------------
SGI has released a security advisory at the following FTP link: 20040501-01-I["ftp://patches.sgi.com/support/free/security/advisories/20040501-01-I.asc"]
|
|