From owner-freebsd-security  Tue Mar 12 14:50:51 2002
Delivered-To: freebsd-security@freebsd.org
Received: from mailtest.btconnex.net (mailtest.btconnex.net [209.47.192.8])
	by hub.freebsd.org (Postfix) with SMTP id 5F2BF37B41F
	for <freebsd-security@freebsd.org>; Tue, 12 Mar 2002 14:50:30 -0800 (PST)
Received: (qmail 53982 invoked from network); 12 Mar 2002 22:48:04 -0000
Received: from unknown (HELO ?192.168.66.52?) (192.168.66.52)
  by mailtest.btconnex.net with SMTP; 12 Mar 2002 22:48:04 -0000
Date: Tue, 12 Mar 2002 17:49:28 -0500 (EST)
From: Elliott Perrin <eperrin@beanfield.com>
X-X-Sender:  <eperrin@decalpha.beanfield.net>
To: <freebsd-security@freebsd.org>
Subject: A Linux Virus that infects ELF (x86 only) 
Message-ID: <20020312173313.P13359-100000@decalpha.beanfield.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

I was just wondering if anyone knows if a new LINUX virus that is posted
at SARC

http://www.sarc.com/avcenter/venc/data/linux.jac.8759.html

is capable of infecting ELF executables on the BSD platform. There is
little information about this posted there, I couldn't find any info
about it at sophos, and a google search pointed me back to Symantec.

I ran across it while looking at information on the new W32.Gibe worm that
poses as an MS Security Update, so I figured I'd ask to see if anyone here
knows about this.

Cheers,
eperrin@beanfield.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message