Re: FW: OpenSSL worm

[<william () elan net>]

I also received advisory from dshield, it'd be usefull for others to see too:

> Date: Fri, 13 Sep 2002 20:37:13 -0400
> From: Johannes Ullrich <jullrich () euclidian com>
> To: dshieldannounce () dshield org
> Subject: [Dshieldannounce] openssl advisory
>
> we are tracking an increase in exploits of apache web servers via
> a vulnerability is mod_ssl.
>
> details: http://isc.incidents.org/analysis.html?id=167

On Fri, 13 Sep 2002, Avery Buffington wrote:

> passing this along for those who may have not seen it yet
>
> -----Original Message-----
> From: Hal Flynn [mailto:flynn () securityfocus com]
> Sent: Friday, September 13, 2002 12:23 PM
> To: focus-linux () securityfocus com
> Subject: OpenSSL worm
>
>
> For those of you not aware, there has been a report of an OpenSSL worm in
> the wild.  Discussion is on Bugtraq currently.
>
> Cheers,
>
> Hal Flynn
> Symantec Corp.
>
> "....You guys are the Marine's doctors; There's no better in the business
> than a Navy Corpsman...."
>   -- Lieutenant General Lewis B. "Chesty" Puller, U.S.M.C.