Security Incidents mailing list archives

New worm segfaults apache


From: bugtraq <bugtraq () cgisecurity net>
Date: Tue, 18 Sep 2001 15:37:11 +0000 (GMT)

Hello,


Over 15 times my apache has segfaulted whenever I get scanned by this worm.

Sep 18 13:30:15 cgisecurity /kernel: pid 35290 (httpd), uid 1003: exited on signal 11
Sep 18 13:38:03 cgisecurity /kernel: pid 35390 (httpd), uid 1003: exited on signal 11
Sep 18 14:06:00 cgisecurity /kernel: pid 35391 (httpd), uid 1003: exited on signal 11
Sep 18 14:20:51 cgisecurity /kernel: pid 35453 (httpd), uid 1003: exited on signal 11
Sep 18 15:27:22 cgisecurity /kernel: pid 35740 (httpd), uid 1003: exited on signal 11
^C

Any idea why apache is segfaulting? I have 250 megs of free ram without proccess limits and
it segfaults. Also I tried every string and have been unable to replicate it manually.

- admin () cgisecurity com


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: