nanog mailing list archives

Re: Just an FYI - Apache Worm on the loose


From: Scott Francis <darkuncle () darkuncle net>
Date: Wed, 10 Jul 2002 08:29:21 -0700

On Tue, Jul 09, 2002 at 02:26:23PM -0700, jlegate () alienchick com said:
There is an Apache worm out there, and it uses port 2001/udp to operate.  You
may wanna scan your own boxes for this open port.

Announced last week on BUGTRAQ and elsewhere.
http://online.securityfocus.com/archive/1/279529

(and was it _really_ necessary to post a hex dump of the entire thing? The
actual source is available linked from the BUGTRAQ post above ...)
-- 
-= Scott Francis || darkuncle (at) darkuncle (dot) net =-
  GPG key CB33CCA7 has been revoked; I am now 5537F527
        illum oportet crescere me autem minui

Attachment: _bin
Description:


Current thread: