W32.Gaobot.ALW

Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy

Risk Level 2: Low

Printer Friendly Page|Rate this page

W32.Gaobot.ALW is a worm that spreads through open network shares and several Windows vulnerabilities. The vulnerabilities are:

The Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability (described in Microsoft Security Bulletin MS03-026).
The Microsoft Windows Workstation Service Remote Buffer Overflow Vulnerability (described in Microsoft Security Bulletin MS03-049).
The Microsoft Windows WebDAV Buffer Overflow Vulnerability (described in Microsoft Security Bulletin MS03-007).
The Microsoft UPnP NOTIFY Buffer Overflow Vulnerability (described in Microsoft Security Bulletin MS01-059).
The Microsoft SQL Server Web Task Stored Procedure Privilege Escalation Vulnerability (described in Microsoft Security Bulletin MS02-061).
The Microsoft Windows Local Security Authority Service Remote Buffer Overflow (described in Microsoft Security Bulletin MS04-011).