Analysis of Modap worm

[Mario van Velzen <mvelzen () securityfocus com>]

Greetings,

We have completed and released our analysis of the Modap worm, which has
been targeting Apache Web servers running vulnerable versions of OpenSSL.

In addition, we have also released to the public our initial Incident
Alert on this issue, available at:
http://analyzer.securityfocus.com/alerts/020913-Alert-Apache-mod_ssl-Exploit.pdf

The full analysis is available at:
http://analyzer.securityfocus.com/alerts/020916-Analysis-Modap.pdf

If you have any comments or concerns, please do not hesitate to contact
me.

Cheers,

Mario Van Velzen, mvelzen () securityfocus com
DeepSight Threat Management System, Symantec