[52065] in North American Network Operators' Group
Re: FW: OpenSSL worm
daemon@ATHENA.MIT.EDU (william@elan.net)
Fri Sep 13 23:22:31 2002
Date: Fri, 13 Sep 2002 20:05:15 -0700 (PDT)
From: <william@elan.net>
To: "'nanog@merit.edu'" <nanog@merit.edu>
In-Reply-To: <5519ADC88B72AA469DBF02CA51211CE80285DB1A@fxapps3.mesas.com>
Errors-To: owner-nanog-outgoing@merit.edu
I also received advisory from dshield, it'd be usefull for others to see too:
> Date: Fri, 13 Sep 2002 20:37:13 -0400
> From: Johannes Ullrich <jullrich@euclidian.com>
> To: dshieldannounce@dshield.org
> Subject: [Dshieldannounce] openssl advisory
>
> we are tracking an increase in exploits of apache web servers via
> a vulnerability is mod_ssl.
>
> details: http://isc.incidents.org/analysis.html?id=167
On Fri, 13 Sep 2002, Avery Buffington wrote:
>
>
> passing this along for those who may have not seen it yet
>
> -----Original Message-----
> From: Hal Flynn [mailto:flynn@securityfocus.com]
> Sent: Friday, September 13, 2002 12:23 PM
> To: focus-linux@securityfocus.com
> Subject: OpenSSL worm
>
>
> For those of you not aware, there has been a report of an OpenSSL worm in
> the wild. Discussion is on Bugtraq currently.
>
> Cheers,
>
> Hal Flynn
> Symantec Corp.
>
> "....You guys are the Marine's doctors; There's no better in the business
> than a Navy Corpsman...."
> -- Lieutenant General Lewis B. "Chesty" Puller, U.S.M.C.
>