Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 8 Apr 2008 07:36:48 +1000
From:      Edwin Groothuis <edwin@mavetju.org>
To:        freebsd-proliant@freebsd.org
Subject:   HP USB Keys Shipped with Malware for your Proliant Server
Message-ID:  <20080407213648.GK3162@k7.mavetju>

next in thread | raw e-mail | index | archive | help
Stumbled over this in my RSS feed this morning:

http://isc.sans.org/diary.html?storyid=4247
http://www.auscert.org.au/render.html?it=9077

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                       ESB-2008.0354 -- [Appliance]
       HP USB Floppy Drive Key (Option) for ProLiant Servers, Local
                              Virus Infection
                               7 April 2008

===========================================================================

[...]

VULNERABILITY SUMMARY
A potential security vulnerability has been identified with two types of
optional HP USB Floppy Drive Keys intended for use with certain ProLiant
servers. This vulnerability could cause a local 'W32.Fakerecy' or
'W32.SillyFDC' virus infection.

[...]


Short story: If you install the USB Floppy Drive Key and run Windows,
you have to check the USB stick for viruses first.


Edwin

-- 
Edwin Groothuis      |            Personal website: http://www.mavetju.org
edwin@mavetju.org    |              Weblog: http://www.mavetju.org/weblog/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080407213648.GK3162>