Linux worm

[Bill Day]

This would be the first time I have seen a "Systems Not Affected:" to
include all windows version...

Also Known As: Apache/mod_ssl Worm
Type: Worm
Systems Affected: Linux
Systems Not Affected: Windows 3.x, Windows 95, Windows 98, Windows NT,
Windows 2000, Windows XP, Windows Me, Macintosh
CVE References: CAN-2002-0656



Bill Day

Linux 2.2.20-1tr i586
 10:10am  up 10 days,  3:34,  0 users,  load average: 0.00, 0.00, 0.00

----- Original Message -----
From: "Harry G" <harrycg at earthlink.net>
To: "SxS Users" <linux-users at linux-sxs.org>
Sent: Saturday, September 14, 2002 9:30 AM
Subject: Linux worm


>
http://securityresponse.symantec.com/avcenter/venc/data/linux.slapper.worm.h
tml
>
> Quote: "The worm uses the following set of /8 IP addresses to attack new
> machines by randomly scanning for Apache systems:
>  3, 4, 6, 8, 9, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 24, 25,
26,
> 28, 29, 30, 32, 33, 34, 35, 38, 40, 43, 44, 45, 46, 47, 48, 49, 50, 51,
52,
> 53, 54, 55, 56, 57, 61, 62, 63, 64, 65, 66, 67, 68, 80, 81, 128, 129, 130,
> 131, 132, 133, 134, 135, 136, 137, 138, 139, 140, 141, 142, 143, 144, 145,
> 146, 147, 148, 149, 150, 151, 152, 153, 154, 155, 156, 157, 158, 159, 160,
> 161, 162, 163, 164, 165, 166, 167, 168, 169, 170, 171, 172, 173, 174, 175,
> 176, 177, 178, 179, 180, 181, 182, 183, 184, 185, 186, 187, 188, 189, 190,
> 191, 192, 193, 194, 195, 196, 198, 199, 200, 201, 202, 203, 204, 205, 206,
> 207, 208, 209, 210, 211, 212, 213, 214, 215, 216, 217, 218, 219, 220, 224,
> 225, 226, 227, 228, 229, 230, 231, 232, 233, 234, 235, 236, 237, 238, 239
"
>
> Harry G
>
>
> _______________________________________________
> Linux-users mailing list
> Linux-users at linux-sxs.org
> Unsubscribe/Suspend/Etc ->
http://www.linux-sxs.org/mailman/listinfo/linux-users


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.386 / Virus Database: 218 - Release Date: 9/9/02