Sasser Worm

Why Trust Techopedia

What Does Sasser Worm Mean?

A Sasser worm is a computer worm mainly targeting computers running Microsoft OSs such as Windows XP and Windows 2000. Sasser worm transmits by exploiting a vulnerable network port. This worm can easily spread out from one computer to another without user interference.

Advertisements

Sasser worm was first discovered in April 2004. It belongs to a family of self executing worms known as W32.Sasser.

Techopedia Explains Sasser Worm

The Sasser worm was written by a German computer science student named Sven Jaschan. The worm was first noticed when it exploited a buffer overrun in a process called local security authority subsystem service (LSASS), which enforces security policies on the system. It has the ability spread to many computers rapidly. Sasser worm uses the TCP port number 445 to attack a computer. (Though some Microsoft researchers also claim it may use port 139).

Within a short time, the variants Sasser-A, Sasser-B and Sasser-C were found to be affecting hundreds of computers around the world.

The W32.Sasser family of worms can also run on computers running Windows 95, 98 and Me OSs. On some systems the worm may cause LSASS.EXE to crash, resulting in a system reboot.

Advertisements

Related Terms

Margaret Rouse
Technology Specialist
Margaret Rouse
Technology Specialist

Margaret is an award-winning writer and educator known for her ability to explain complex technical topics to a non-technical business audience. Over the past twenty years, her IT definitions have been published by Que in an encyclopedia of technology terms and cited in articles in the New York Times, Time Magazine, USA Today, ZDNet, PC Magazine, and Discovery Magazine. She joined Techopedia in 2011. Margaret’s idea of ​​a fun day is to help IT and business professionals to learn to speak each other’s highly specialized languages.