Analysis of Modap worm

[Mario van Velzen <mvelzen () securityfocus com>]

Greetings,

We have completed and released our analysis of the Modap worm, which has
been targeting Apache Web servers running vulnerable versions of OpenSSL.

In addition, we have also released to the public our initial Incident
Alert on this issue, available at:
http://analyzer.securityfocus.com/alerts/020913-Alert-Apache-mod_ssl-Exploit.pdf

The full analysis is available at:
http://analyzer.securityfocus.com/alerts/020916-Analysis-Modap.pdf

If you have any comments or concerns, please do not hesitate to contact
me.

Cheers,

Mario Van Velzen, mvelzen () securityfocus com
DeepSight Threat Management System, Symantec


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com