039

yiminggong

The following are quoted from isc.sans and SF
"Interesting game of numbers:
SQL Slammer was using bug fixed in MS02-039
Zotob is using bug fixed in MS05-039
Hex 39 is 57 decimal, which is big W (Worm? Windows?) in ASCII."
the worm compromises systems by sending data on port 445. If a computer is infected with the program, the worm starts a file-transfer protocol (FTP) server and attempts to spread further,
Microsoft's investigation into the worm indicated that it only infects Windows 2000 systems.

本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u/8900/showart_42049.html