From owner-freebsd-questions Mon Jul 1 5:28:17 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 42EE437B401 for ; Mon, 1 Jul 2002 05:28:06 -0700 (PDT) Received: from mail2.swbanktx.com (mail2.swbanktx.com [63.89.83.247]) by mx1.FreeBSD.org (Postfix) with ESMTP id 443E443E1A for ; Mon, 1 Jul 2002 05:28:03 -0700 (PDT) (envelope-from rclark@swbanktx.com) Received: from swbtexcn1.swbanktx.com (unverified) by mail2.swbanktx.com (Content Technologies SMTPRS 4.1.5) with ESMTP id ; Mon, 1 Jul 2002 07:23:00 -0500 Received: by swbtexcn1.swbanktx.com with Internet Mail Service (5.5.2653.19) id ; Mon, 1 Jul 2002 07:23:00 -0500 Message-ID: <9F560B2FB311D6119A7D00204840E20501D1546F@swbtexch2.swbanktx.com> From: Ronald Clark To: 'Patrick O'Reilly' , FreeBSD Question List Subject: RE: Apache Worm Comments??? Date: Mon, 1 Jul 2002 07:22:54 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: multipart/alternative ; boundary="----_=_NextPart_001_01C220FA.0675E958" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C220FA.0675E958 Content-Type: text/plain Patrick, Yes, it is true. Sometime Late Friday or early Saturday, someone released a new worm into the wild. It only infects systems running FreeBSD and unpatched Apache (versions 1.3.25 and older, as well as some of the 2.0 as well, unpatched of course). From what I read over the weekend, it can effect linux running Apache, just not infect it. Tha t is about as much as I know now, but I'm sure more will come today. +--------------------------+ |Thank you, | |Ron Clark | |Network Security Engineer | +--------------------------+ -----Original Message----- From: Patrick O'Reilly [mailto:peri@perimeter.co.za] Sent: Monday, July 01, 2002 4:58 AM To: FreeBSD Question List Subject: Apache Worm Comments??? Does anyone more knowledgeable than me have a comment on this article? http://news.com.com/2100-1001-940585.html?tag=fd_top Regards, Patrick O'Reilly. ___ _ __ / _ )__ __ (_)_ __ ___ _/ /____ __ / __/ -_) _) / ~ ) -_), ,-/ -_) _) /_/ \__/_//_/_/~/_/\__/ \__/\__/_/ http://www.perimeter.co.za To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message CONFIDENTIALITY NOTICE: ************************************************************************ The information contained in this ELECTRONIC MAIL transmission is confidential. It may also be privileged work product or proprietary information. This information is intended for the exclusive use of the addressee(s). If you are not the intended recipient, you are hereby notified that any use, disclosure, dissemination, distribution [other than to the addressee(s)], copying or taking of any action because of this information is strictly prohibited. ************************************************************************ ------_=_NextPart_001_01C220FA.0675E958 Content-Type: text/html Content-Transfer-Encoding: quoted-printable RE: Apache Worm Comments???

Patrick,

  Yes, it is true. Sometime Late Friday or early Sat= urday, someone released a new worm into the wild. It only infects systems r= unning FreeBSD and unpatched Apache (versions 1.3.25 and older, as well as = some of the 2.0 as well, unpatched of course). From what I read over the we= ekend, it can effect linux running Apache, just not infect it. Tha t is abo= ut as much as I know now, but I'm sure more will come today.

+--------------------------+
|Thank you,       &nb= sp;        |
|Ron Clark       &nbs= p;         |
|Network Security Engineer |
+--------------------------+





-----Original Message-----
From: Patrick O'Reilly [mailto:peri@perimeter.co.za]
Sent: Monday, July 01, 2002 4:58 AM
To: FreeBSD Question List
Subject: Apache Worm Comments???


Does anyone more knowledgeable than me have a comment on = this article?

http://news.com.com/2100-1001-940585.html?tag= =3Dfd_top

Regards,
Patrick O'Reilly.
    ___     &nbs= p;  _           = ; __
   / _ )__ __ (_)_ __ ___ _/ /____ __
  / __/ -_) _) /  ~  ) -_), ,-/ -_) _)
 /_/  \__/_//_/_/~/_/\__/ \__/\__/_/
    http://www.perimeter.co.za



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the bo= dy of the message



CONFIDENTIALITY NOTICE:

************************************************************************

The information contained in this ELECTRONIC MAIL transmission
is confidential. It may also be privileged work product or proprietary
information. This information is intended for the exclusive use of the
addressee(s). If you are not the intended recipient, you are hereby
notified that any use, disclosure, dissemination, distribution [other
than to the addressee(s)], copying or taking of any action because
of this information is strictly prohibited.

************************************************************************
 ------_=_NextPart_001_01C220FA.0675E958-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message