Full Disclosure mailing list archives
RE: Re: Administrivia: Testing Emergency Virus Filter..
From: "Schmehl, Paul L" <pauls () utdallas edu>
Date: Wed, 20 Aug 2003 17:02:43 -0500
-----Original Message----- From: martin f krafft [mailto:madduck () madduck net] Sent: Wednesday, August 20, 2003 1:35 PM To: full-disclosure () lists netsys com Subject: [Full-disclosure] Re: Administrivia: Testing Emergency Virus Filter.. Only partially right, the other part is bugs in software and automation techniques that make viruses much easier and effective. Moreover, it's operating system design. If I caught a virus on my UNIX system, I might be sending it on if the virus is smart enough to figure out a way to get into control and to execute sendmail. However, it won't be able to infest the system and other local users.
Why would it have to execute sendmail? All it has to do is run /bin/mail(x) or use its own routines to telnet to port 25 and "talk smtp" directly. About the only OS I know of that doesn't have a telnet client and mail or mailx by default is Gentoo. No need to launch any daemons on your box. Most "modern" worms don't bother with processes on the box anyway. They create their own, download them or bring them with them. Paul Schmehl (pauls () utdallas edu) Adjunct Information Security Officer The University of Texas at Dallas AVIEN Founding Member http://www.utdallas.edu/~pauls/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Administrivia: Testing Emergency Virus Filter.., (continued)
- Re: Administrivia: Testing Emergency Virus Filter.. Nick FitzGerald (Aug 21)
- RE: Administrivia: Testing Emergency Virus Filter.. Dan Stromberg (Aug 21)
- RE: Administrivia: Testing Emergency Virus Filter.. Paul Szabo (Aug 20)
- RE: Administrivia: Testing Emergency Virus Filter.. Schmehl, Paul L (Aug 20)
- RE: Administrivia: Testing Emergency Virus Filter.. Schmehl, Paul L (Aug 20)
- RE: Administrivia: Testing Emergency Virus Filter.. Gary E. Miller (Aug 20)
- Re: Administrivia: Testing Emergency Virus Filter.. Bryan Allen (Aug 20)
- RE: Administrivia: Testing Emergency Virus Filter.. Gary E. Miller (Aug 20)
- RE: Administrivia: Testing Emergency Virus Filter.. Schmehl, Paul L (Aug 20)
- Re: Administrivia: Testing Emergency Virus Filter.. Valdis . Kletnieks (Aug 20)
- RE: Administrivia: Testing Emergency Virus Filter.. Gary E. Miller (Aug 20)
- RE: Re: Administrivia: Testing Emergency Virus Filter.. Schmehl, Paul L (Aug 20)
- RE: Re: Administrivia: Testing Emergency Virus Filter.. Drew Copley (Aug 20)
- RE: Re: Administrivia: Testing Emergency Virus Filter.. Gary E. Miller (Aug 20)
- RE: Re: Administrivia: Testing Emergency Virus Filter.. Paul Schmehl (Aug 20)
- RE: Re: Administrivia: Testing Emergency Virus Filter.. Gary E. Miller (Aug 20)
- RE: Re: Administrivia: Testing Emergency Virus Filter.. Drew Copley (Aug 21)
- RE: Re: Administrivia: Testing Emergency Virus Filter.. Drew Copley (Aug 20)
- Re: Re: Administrivia: Testing Emergency Virus Filter.. Thor Larholm (Aug 21)
- RE: Re: Administrivia: Testing Emergency Virus Filter.. Drew Copley (Aug 21)