MSBlast worm a Frankenstein monster

[Gary Stoneburner <gary.stoneburner@nist.gov>]

re: 
http://zdnet.com.com/2100-1105_2-5062998.html

" The latest threat to hit the Internet is a piecemeal compilation
of programs cobbled together to do a single job: spread across the
Internet. The Frankenstein's monster of code stitches together a widely
available file server, one of several public programs to exploit a
widespread Windows flaw, and common techniques for compromising
computers.  The combination is unoriginal, but effective. 
..."

This attack has, according to media reports (keeping source in mind :-),
hit many, many, many machines.  Yet it is, if the depiction here is
accurate (and it is reasonable to believe it is), not sophisticated so
much as it is pragmatic.

We are still seeing the high impact that less than the best can do to
us.  The best are still out there and I have to suppose that some of
them are not nice.

Cheers,
Gary

PS: If you have windows and have not patched the RPC flaw - shame on
you!

**************************************************************************
* Opinions expressed are not intended to reflect an official position
**************************************************************************
* Gary Stoneburner
* Computer Security Division, National Institute of Standards & Technology
* 100 Bureau Drive, Stop 8930, Gaithersburg, MD 20899-8930         
* Phone: 301-975-5394, FAX: 301-948-0279, Email: Stoneburner@nist.gov
* http://csrc.nist.gov/staff/stoneburner/gshome.html
**************************************************************************