FrSIRT - Description de la menace Troj/Agent-GYY

French Security Incident Response Team

Français

English

Troj/Agent-GYY

Date de Publication : 2008-05-11
Identifiant : FrSIRT/ALRT-2008-02778
Alias : Backdoor.Win32.Agent.epb
Risque : Bas

Taille : N/A

Description

Troj/Agent-GYY est un cheval de Troie fonctionnant sous la plateforme Windows. Troj/Agent-GYY inclut des fonctionnalités lui permettant d'accéder à internet et communiquer avec un serveur distant via HTTP.

Références

http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentgyy.html

Crédit

Menace identifiée par Sophos

ChangeLog

2008-05-11 - Version Initiale

	IBM Lotus Quickr Denial of Service Vulnerabilities
	IBM Tivoli Netcool/Webtop Multiple Security Bypass Vulnerabilities
	IBM WebSphere Application Server Security Exposure Vulnerabilities
	IBM DB2 Universal Database Multiple Denial of Service
	IBM AIX "swcons" Insecure Permission Privilege Escalation Vulnerability
	IBM WebSphere Application Server Cross Site Scripting Vulnerability
	IBM DB2 CLR Stored Procedures Unspecified Vulnerability

	Microsoft Windows Kernel Local Integer Overflow Vulnerability
	Microsoft Windows Vista "WRITE_ANDX" Denial of Service Vulnerability
	Microsoft Office OneNote URL Code Execution (MS08-055)
	Microsoft GDI+ Multiple Code Execution Vulnerabilities (MS08-052)
	Microsoft Visual Studio "Msmask32" Code Execution Vulnerability
	Microsoft PowerPoint Command Execution Vulnerabilities (MS08-051)
	Microsoft Windows Messenger Data Disclosure (MS08-050)

	Apple Mac OS X Code Execution Vulnerabilities
	Apple TV Multiple File Processing Code Execution Vulnerabilities
	Apple Mac OS X Code Execution Vulnerabilities
	Apple iPhone Code Execution Vulnerabilities
	Apple QuickTime Multiple Remote Code Execution Vulnerabilities
	Apple iTunes Driver Integer Overflow Privilege Escalation Vulnerability
	Apple iPod touch Code Execution Vulnerabilities