Security musings (reflectorium)
Security musings (reflectorium)
More on witty and dealing with it
ISS has patches and recommends at
http://xforce.iss.net/xforce/alerts/id/166:
"While deploying the updates, it may be advisable to block some ICQ traffic in network environments where the ICQ protocol is not in use. This can be achieved by blocking UDP packets with a source port of 4000 at the network perimeter."
The original eeye advisory is at
http://www.eeye.com/html/Research/Advisories/AD20040318.html.