[49798] in North American Network Operators' Group
Re: Just an FYI - Apache Worm on the loose
daemon@ATHENA.MIT.EDU (Scott Francis)
Wed Jul 10 11:32:39 2002
Date: Wed, 10 Jul 2002 08:29:21 -0700
From: Scott Francis <darkuncle@darkuncle.net>
To: Jason Legate <jlegate@alienchick.com>
Cc: nanog@nanog.org
Mail-Followup-To: Scott Francis <darkuncle@darkuncle.net>,
Jason Legate <jlegate@alienchick.com>, nanog@nanog.org
In-Reply-To: <20020709142623.D4169@vineyard.evine.com>
Errors-To: owner-nanog-outgoing@merit.edu
--Qf1oXS95uex85X0R
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Tue, Jul 09, 2002 at 02:26:23PM -0700, jlegate@alienchick.com said:
> There is an Apache worm out there, and it uses port 2001/udp to operate. =
You
> may wanna scan your own boxes for this open port.
Announced last week on BUGTRAQ and elsewhere.
http://online.securityfocus.com/archive/1/279529
(and was it _really_ necessary to post a hex dump of the entire thing? The
actual source is available linked from the BUGTRAQ post above ...)
--=20
-=3D Scott Francis || darkuncle (at) darkuncle (dot) net =3D-
GPG key CB33CCA7 has been revoked; I am now 5537F527
illum oportet crescere me autem minui
--Qf1oXS95uex85X0R
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)
iD8DBQE9LFLRWaB7jFU39ScRAts2AKDI7nkCMZCe8BWORWBRuRpOuJNfkwCfRAHs
U8CjmcNCXSfGzrJWCidAZg8=
=rnaE
-----END PGP SIGNATURE-----
--Qf1oXS95uex85X0R--
