[52065] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: FW: OpenSSL worm

daemon@ATHENA.MIT.EDU (william@elan.net)
Fri Sep 13 23:22:31 2002

Date: Fri, 13 Sep 2002 20:05:15 -0700 (PDT)
From: <william@elan.net>
To: "'nanog@merit.edu'" <nanog@merit.edu>
In-Reply-To: <5519ADC88B72AA469DBF02CA51211CE80285DB1A@fxapps3.mesas.com>
Errors-To: owner-nanog-outgoing@merit.edu


I also received advisory from dshield, it'd be usefull for others to see too:

> Date: Fri, 13 Sep 2002 20:37:13 -0400
> From: Johannes Ullrich <jullrich@euclidian.com>
> To: dshieldannounce@dshield.org
> Subject: [Dshieldannounce] openssl advisory
> 
> we are tracking an increase in exploits of apache web servers via
> a vulnerability is mod_ssl.
> 
> details: http://isc.incidents.org/analysis.html?id=167

On Fri, 13 Sep 2002, Avery Buffington wrote:

> 
> 
> passing this along for those who may have not seen it yet
> 
> -----Original Message-----
> From: Hal Flynn [mailto:flynn@securityfocus.com]
> Sent: Friday, September 13, 2002 12:23 PM
> To: focus-linux@securityfocus.com
> Subject: OpenSSL worm
> 
> 
> For those of you not aware, there has been a report of an OpenSSL worm in
> the wild.  Discussion is on Bugtraq currently.
> 
> Cheers,
> 
> Hal Flynn
> Symantec Corp.
> 
> "....You guys are the Marine's doctors; There's no better in the business
> than a Navy Corpsman...."
>   -- Lieutenant General Lewis B. "Chesty" Puller, U.S.M.C.
> 




home help back first fref pref prev next nref lref last post