From owner-freebsd-security Fri Jun 28 16:58:31 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8AB3337B400 for ; Fri, 28 Jun 2002 16:58:29 -0700 (PDT) Received: from mail.baysec.org (baysec.org [66.35.227.180]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4591843E09 for ; Fri, 28 Jun 2002 16:58:29 -0700 (PDT) (envelope-from jluster@baysec.org) Received: from jluster by mail.baysec.org with local (Exim 4.02) id 17O5d1-0008z3-00; Fri, 28 Jun 2002 16:58:15 -0700 Date: Fri, 28 Jun 2002 16:58:15 -0700 From: Jonas M Luster To: Domas Mituzas Cc: bugtraq@securityfocus.com, freebsd-security@freebsd.org Subject: Re: apache-worm.c Message-ID: <20020628165815.A34506@baysec.org> Mail-Followup-To: Jonas M Luster , Domas Mituzas , bugtraq@securityfocus.com, freebsd-security@freebsd.org References: <20020628222723.G59739-100000@axis.tdd.lt> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20020628222723.G59739-100000@axis.tdd.lt> User-Agent: Mutt/1.3.22.1i Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Quoting Domas Mituzas (domas.mituzas@microlink.lt): > Hi, > > no need for further binary analysis, I've got the source in my inbox: > > http://dammit.lt/apache-worm/apache-worm.c This seems to be a different source than the one, the binary was compiled from. The binary uses a lynx version string while this one uses User-Agent: Mozilla/4.75 [en] instead. -- Jonas M Luster -- d-fensive networks, Inc. -- http://www.d-fensive.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message