From owner-freebsd-security Sun Jun 30 5:46:59 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D6EEB37B401 for ; Sun, 30 Jun 2002 05:46:51 -0700 (PDT) Received: from backup.af.speednet.com.au (afgate.speednet.com.au [203.57.65.244]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7BB0543E1D for ; Sun, 30 Jun 2002 05:46:49 -0700 (PDT) (envelope-from andyf@speednet.com.au) Received: from backup.af.speednet.com.au (andyf@backup.af.speednet.com.au [172.22.2.4]) by backup.af.speednet.com.au (8.11.6/8.11.6) with ESMTP id g5UCkdU42909; Sun, 30 Jun 2002 22:46:40 +1000 (EST) (envelope-from andyf@speednet.com.au) Date: Sun, 30 Jun 2002 22:46:37 +1000 (EST) From: Andy Farkas X-X-Sender: To: Kent Stewart Cc: Subject: Re: FreeBSD.Scalper.Worm In-Reply-To: <3D1E9CDD.6050507@owt.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Sat, 29 Jun 2002, Kent Stewart wrote: > One of the people sending mail to -docs, pointed me to > > http://securityresponse.symantec.com/avcenter/venc/data/freebsd.scalper.worm.html > > It looks like more exposure needs to be provided via the web site and etc. > > Kent > > -- > Kent Stewart > Richland, WA > > http://users.owt.com/kstewart/index.html > Looks like this worm can be stopped by having /tmp mounted noexec. -- :{ andyf@speednet.com.au Andy Farkas System Administrator Speednet Communications http://www.speednet.com.au/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message