[2134] in linux-security and linux-alert archive
[linux-security] Re: *ALERT*: ADM Worm. Worm for Linux x86 found in wild.
daemon@ATHENA.MIT.EDU (Ryan Fox)
Fri Mar 26 08:37:49 1999
Date: Fri, 26 Mar 1999 08:26:19 -0500
From: Ryan Fox <rfox@noguska.com>
To: Jan-Philip Velders <jpv@jvelders.tn.tudelft.nl>
CC: linux-security@redhat.com
Resent-From: linux-security@redhat.com
Resent-Reply-To: linux-security@redhat.com
Jan-Philip Velders wrote:
>
> ---------- Forwarded message ----------
> Date: Thu, 25 Mar 1999 16:26:59 -0700
> From: "Ben Cantrick (Macky Stingray)" <mackys@MACKY.RONIN.NET>
> To: BUGTRAQ@NETSPACE.ORG
> Subject: ADM Worm. Worm for Linux x86 found in wild.
>
> 1. Summary
>
> On the week of 3/7, a polite mail from a system administrator at a
> company in Russia tipped me off to one of our Redhat boxes portscanning
> one of their subnets. Subsequent investigation found that a worm had
> infected the offending box and was attempting to propagate itself.
>
> 2. Further info
>
> The files I have can be retrieved at:
>
> ftp://ftp.ronin.net/pub/admworm/admworm.tgz
>
> This FTP server is on a low-speed line, and there is a 5 user
> simultanious limit. Keep trying. I assume someone will mirror the files
> to a faster server and announce the location here on Bugtraq for everyone's
> enjoyment.
>
>
File is now mirrored at ftp://216.28.98.11/pub/exploits/admworm.tgz .
Should be a bit easier to get to.
[mod: Watch your line lengths... -- REW]
--
Ryan Fox
Noguska
rfox@noguska.com
--
----------------------------------------------------------------------
Please refer to the information about this list as well as general
information about Linux security at http://www.aoy.com/Linux/Security.
----------------------------------------------------------------------
To unsubscribe:
mail -s unsubscribe linux-security-request@redhat.com < /dev/null
