Description
Win32/Cuebot.K is a worm that spreads by exploiting the Microsoft Windows Server service buffer overflow vulnerability. The worm can also be used as a backdoor that allows its remote controller unauthorized access to the affected machine. It has been distributed as a 9,374-byte Win32 executable.
In order to spread, the worm attempts to exploit the Microsoft Windows Server service buffer overflow vulnerability. For more information on this vulnerability, please visit:
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34486
http://www.microsoft.com/technet/security/Bulletin/MS06-040.mspx
This malware is detected by eTrust Antivirus solutions. Please see above for the relevant signature updates.
This malware is being dissected by the CA Security Advisory Team.