From owner-freebsd-security Mon Jun 10 11: 7:57 2002 Delivered-To: freebsd-security@freebsd.org Received: from spqr.osg.gov.bc.ca (spqr.osg.gov.bc.ca [142.32.102.24]) by hub.freebsd.org (Postfix) with ESMTP id 3557837B43C for ; Mon, 10 Jun 2002 11:05:29 -0700 (PDT) Received: from passer.osg.gov.bc.ca (passer.osg.gov.bc.ca [142.32.110.29]) by spqr.osg.gov.bc.ca (Postfix) with ESMTP id B06B99F110; Mon, 10 Jun 2002 11:05:28 -0700 (PDT) Received: from cwsys.cwsent.com (cwsys2 [10.1.2.1]) by passer.osg.gov.bc.ca (8.12.4/8.12.3) with ESMTP id g5AI5I0j045032; Mon, 10 Jun 2002 11:05:18 -0700 (PDT) (envelope-from cy@cwsent.com) Received: from cwsys (localhost [127.0.0.1]) by cwsys.cwsent.com (8.12.4/8.12.3) with ESMTP id g5AI5HGn004193; Mon, 10 Jun 2002 11:05:17 -0700 (PDT) (envelope-from cy@cwsys.cwsent.com) Message-Id: <200206101805.g5AI5HGn004193@cwsys.cwsent.com> X-Mailer: exmh version 2.5 07/13/2001 with nmh-1.0.4 Reply-To: Cy Schubert - CITS Open Systems Group From: Cy Schubert - CITS Open Systems Group X-os: FreeBSD X-Sender: cy@cwsent.com To: Matthew Dillon Cc: Cy Schubert - CITS Open Systems Group , freebsd-security@FreeBSD.ORG Subject: Re: Linux/Windows Virus In-Reply-To: Message from Matthew Dillon of "Mon, 10 Jun 2002 10:12:50 PDT." <200206101712.g5AHCoEP008968@apollo.backplane.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Mon, 10 Jun 2002 11:05:17 -0700 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Let's hope that's the case. I suspect that you could be right that it's unlikely to spread, however I'm taking a wait-and-see attitude, e.g. this is nothing to be alarmed about yet. -- Cheers, Phone: 250-387-8437 Cy Schubert Fax: 250-387-5766 Team Leader, Sun/Alpha Team Email: Cy.Schubert@osg.gov.bc.ca Open Systems Group, CITS Ministry of Management Services Province of BC FreeBSD UNIX: cy@FreeBSD.org In message <200206101712.g5AHCoEP008968@apollo.backplane.com>, Matthew Dillon w rites: > Pah. It looks pretty stupid to me. I see lots of articles hyping the > thing up and prognasticating the first 'multi platform' virus, but not > a single solid report of an actual infection and not a single > description of the transmission vector other then vague guesses > that it might be remote-shell related (aka like an old ssh hole). > It is highly unlikely that even an old, vulnerable sshd running on > FreeBSD could be infected by this thing. > > -Matt > Matthew Dillon > > > :This should probably concern anyone using Linux emulation under > :FreeBSD. I suspect that it may also attempt to infect FreeBSD > :binaries, rendering them useless. > : > :http://www.symantec.com/avcenter/venc/data/linux.simile.html > : > :Be careful what you run. > : > : > :-- > :Cheers, Phone: 250-387-8437 > :Cy Schubert Fax: 250-387-5766 > :Team Leader, Sun/Alpha Team Email: Cy.Schubert@osg.gov.bc.ca > :Open Systems Group, CITS > :Ministry of Management Services > :Province of BC > : FreeBSD UNIX: cy@FreeBSD.org > : > : To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message