The MSS Outside Advisory Redistribution is designed to provide customers of IBM Managed Security Services with access to the security advisories sent out by other computer security incident response teams, vendors, and other groups concerned about security. IBM makes no representations and assumes no responsibility for the contents or accuracy of the advisories themselves. Please contact them if you have any questions or need further information.
Forwarded Information Starts Here.
The worm uses two well-known vulnerabilities to compromise systems and deface web pages. In addition, it includes a component to propagate itself automatically to other vulnerable Solaris systems. Finally, it will modify the index.html on the host Solaris system after compromising 2,000 IIS systems. Impact Solaris systems compromised by this worm are being used to scan and compromise other Solaris and IIS systems. IIS systems compromised by this worm can suffer modified web content.