Date: Mon, 1 Jul 2002 07:22:54 -0500 From: Ronald Clark <rclark@swbanktx.com> To: 'Patrick O'Reilly' <peri@perimeter.co.za>, FreeBSD Question List <freebsd-questions@freebsd.org> Subject: RE: Apache Worm Comments??? Message-ID: <9F560B2FB311D6119A7D00204840E20501D1546F@swbtexch2.swbanktx.com>
next in thread | raw e-mail | index | archive | help
This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C220FA.0675E958 Content-Type: text/plain Patrick, Yes, it is true. Sometime Late Friday or early Saturday, someone released a new worm into the wild. It only infects systems running FreeBSD and unpatched Apache (versions 1.3.25 and older, as well as some of the 2.0 as well, unpatched of course). From what I read over the weekend, it can effect linux running Apache, just not infect it. Tha t is about as much as I know now, but I'm sure more will come today. +--------------------------+ |Thank you, | |Ron Clark | |Network Security Engineer | +--------------------------+ -----Original Message----- From: Patrick O'Reilly [mailto:peri@perimeter.co.za] Sent: Monday, July 01, 2002 4:58 AM To: FreeBSD Question List Subject: Apache Worm Comments??? Does anyone more knowledgeable than me have a comment on this article? http://news.com.com/2100-1001-940585.html?tag=fd_top Regards, Patrick O'Reilly. ___ _ __ / _ )__ __ (_)_ __ ___ _/ /____ __ / __/ -_) _) / ~ ) -_), ,-/ -_) _) /_/ \__/_//_/_/~/_/\__/ \__/\__/_/ http://www.perimeter.co.za To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message CONFIDENTIALITY NOTICE: ************************************************************************ The information contained in this ELECTRONIC MAIL transmission is confidential. It may also be privileged work product or proprietary information. This information is intended for the exclusive use of the addressee(s). If you are not the intended recipient, you are hereby notified that any use, disclosure, dissemination, distribution [other than to the addressee(s)], copying or taking of any action because of this information is strictly prohibited. ************************************************************************ ------_=_NextPart_001_01C220FA.0675E958 Content-Type: text/html Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Dus-ascii"> <META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version 5.5.2655.35"> <TITLE>RE: Apache Worm Comments???</TITLE> </HEAD> <BODY> <P><FONT SIZE=3D2>Patrick, </FONT> </P> <P><FONT SIZE=3D2> Yes, it is true. Sometime Late Friday or early Sat= urday, someone released a new worm into the wild. It only infects systems r= unning FreeBSD and unpatched Apache (versions 1.3.25 and older, as well as = some of the 2.0 as well, unpatched of course). From what I read over the we= ekend, it can effect linux running Apache, just not infect it. Tha t is abo= ut as much as I know now, but I'm sure more will come today. </FONT></P> <P><FONT SIZE=3D2>+--------------------------+</FONT> <BR><FONT SIZE=3D2>|Thank you, &nb= sp; |</FONT> <BR><FONT SIZE=3D2>|Ron Clark &nbs= p; |</FONT> <BR><FONT SIZE=3D2>|Network Security Engineer |</FONT> <BR><FONT SIZE=3D2>+--------------------------+</FONT> </P> <BR> <BR> <BR> <BR> <P><FONT SIZE=3D2>-----Original Message-----</FONT> <BR><FONT SIZE=3D2>From: Patrick O'Reilly [<A HREF=3D"mailto:peri@perimeter= .co.za">mailto:peri@perimeter.co.za</A>] </FONT> <BR><FONT SIZE=3D2>Sent: Monday, July 01, 2002 4:58 AM</FONT> <BR><FONT SIZE=3D2>To: FreeBSD Question List</FONT> <BR><FONT SIZE=3D2>Subject: Apache Worm Comments???</FONT> </P> <BR> <P><FONT SIZE=3D2>Does anyone more knowledgeable than me have a comment on = this article?</FONT> </P> <P><FONT SIZE=3D2><A HREF=3D"http://news.com.com/2100-1001-940585.html?tag= =3Dfd_top" TARGET=3D"_blank">http://news.com.com/2100-1001-940585.html?tag= =3Dfd_top</A></FONT> </P> <P><FONT SIZE=3D2>Regards,</FONT> <BR><FONT SIZE=3D2>Patrick O'Reilly.</FONT> <BR><FONT SIZE=3D2> ___ &nbs= p; _  = ; __</FONT> <BR><FONT SIZE=3D2> / _ )__ __ (_)_ __ ___ _/ /____ __</FONT> <BR><FONT SIZE=3D2> / __/ -_) _) / ~ ) -_), ,-/ -_) _)</F= ONT> <BR><FONT SIZE=3D2> /_/ \__/_//_/_/~/_/\__/ \__/\__/_/</FONT> <BR><FONT SIZE=3D2> <A HREF=3D"http://www.perimeter.co.za= " TARGET=3D"_blank">http://www.perimeter.co.za</A></FONT>; </P> <BR> <BR> <P><FONT SIZE=3D2>To Unsubscribe: send mail to majordomo@FreeBSD.org</FONT> <BR><FONT SIZE=3D2>with "unsubscribe freebsd-questions" in the bo= dy of the message</FONT> </P> <CODE><FONT SIZE=3D3><BR> <BR> CONFIDENTIALITY NOTICE:<BR> <BR> ************************************************************************<BR> <BR> The information contained in this ELECTRONIC MAIL transmission<BR> is confidential. It may also be privileged work product or proprietary<BR> information. This information is intended for the exclusive use of the<BR> addressee(s). If you are not the intended recipient, you are hereby<BR> notified that any use, disclosure, dissemination, distribution [other<BR> than to the addressee(s)], copying or taking of any action because<BR> of this information is strictly prohibited.<BR> <BR> ************************************************************************<BR> </FONT></CODE></BODY> </HTML> ------_=_NextPart_001_01C220FA.0675E958-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9F560B2FB311D6119A7D00204840E20501D1546F>