Bugbear
Home > Security Definitions - Bugbear
SearchSecurity.com Definitions (Powered by WhatIs.com)
EMAIL THIS
LOOK UP TECH TERMS Powered by: WhatIs.com
Search listings for thousands of IT terms:
Browse tech terms alphabetically:
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z #

Bugbear



Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   

DEFINITION - Bugbear is a computer virus that spread in early October, 2002, infecting thousands of home and business computers. It is similar to an earlier virus, Klez, in terms of its invasion approach and rapid proliferation. Bugbear exploits a weakness in an older version of Microsoft's Outlook and Outlook Express programs that enables the virus to propagate itself through the e-mail addresses found on the computer hard drive. A computer infected with the virus opens a backdoor on port 36794/tcp that exposes the computer and its files to control by a remote user. By accessing a log of keystrokes, a remote user can learn various system passwords. Bugbear also can infiltrate the shares in a networked computer environment, including drive shares and printers (causing them to print out unreadable code).

Bugbear arrives as an attachment in an e-mail that may appear to look legitimate and takes advantage of a vulnerability that automatically executes the attachment when the message is opened or simply viewed in the preview pane. Computer users can guard against Bugbear by installing Microsoft patches to the vulnerable versions of Outlook or by downloading the latest antivirus software updates.

Bugbear is also known as Tanat, Tanatos, WORM_NATOSTA.A, and W32/Bugbear@MM.

LAST UPDATED: 30 Aug 2005

Read more about Bugbear:
- SearchSecurity.com has a "Featured Topic" of articles about Bugbear.
- The CERT Coordination Center provides updates on Bugbear and other current viruses.
- The Australian CERT offers more details about Bugbear.
- A list of antivirus software vendors is provided on CERT's resources page.


Do you have something to add to this definition? Let us know.
Send your comments to techterms@whatis.com


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
New defenses for automated SQL injection attacks
By automating SQL injection attacks, hackers have found a way to expedite the process of finding and exploiting vulnerable websites. The old defenses...
Information security book excerpts and reviews
Visit the Information Security Bookshelf for book reviews and free chapter downloads.
Yahoo, McAfee to warn users of dangerous websites
Websites suspected of spreading malicious programs or spamming and phishing campaigns will be highlighted in search results.

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
bot worm  (SearchSecurity.com)
A bot worm is a self-replicating malware program that resides in current memory, turns infected computers into zombies (or bots) and transmits itself...
directory traversal  (SearchSecurity.com)
Directory traversal is a form of HTTP exploit in which a hacker uses the software on a Web server to access data in a directory other than the...


TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineWebcastsWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts