From owner-freebsd-questions@FreeBSD.ORG Tue Jul 6 09:49:39 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6567616A4CE for ; Tue, 6 Jul 2004 09:49:39 +0000 (GMT) Received: from igloo.linux.gr (igloo.linux.gr [62.1.205.36]) by mx1.FreeBSD.org (Postfix) with ESMTP id A640F43D48 for ; Tue, 6 Jul 2004 09:49:38 +0000 (GMT) (envelope-from keramida@hellug.gr) Received: from igloo.linux.gr (IDENT:1041@localhost [127.0.0.1]) i669nTOa007809; Tue, 6 Jul 2004 12:49:30 +0300 Received: (from keramida@localhost) by igloo.linux.gr (8.12.10/8.12.10/Debian-2) id i669nTF8007807; Tue, 6 Jul 2004 12:49:29 +0300 X-Authentication-Warning: igloo.linux.gr: keramida set sender to keramida@linux.gr using -f Date: Tue, 6 Jul 2004 12:49:29 +0300 From: Giorgos Keramidas To: Matthew Seaman , Phil Schulz , Mark Jayson Alvarez , freebsd-questions@freebsd.org Message-ID: <20040706094929.GA7329@igloo.linux.gr> References: <20040705162320.11141.qmail@web51604.mail.yahoo.com> <40E99786.5000005@gmx.de> <20040705210817.GB4560@gothmog.gr> <20040706094303.GA9617@happy-idiot-talk.infracaninophile.co.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20040706094303.GA9617@happy-idiot-talk.infracaninophile.co.uk> X-Hellug-MailScanner: Found to be clean X-Hellug-MailScanner-SpamCheck: not spam, SpamAssassin (score=-4.887, required 5, autolearn=not spam, AWL 0.01, BAYES_00 -4.90) X-MailScanner-From: keramida@linux.gr Subject: Re: A few simple questions(...if you don't mind) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Jul 2004 09:49:39 -0000 On 2004-07-06 10:43, Matthew Seaman wrote: > > In short, I've heard of no viruses that affect BSDs during the last 7-8 > > years that I'm using a BSD Unix at home and work. > > The only malware that ever achieved any sort of world prominence was > the Scalper worm, which exploited the "chunked transfer encoding" > vulnerability in versions of Apache earlier than 1.3.24 or 2.0.36 on > i386 FreeBSD: > > http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE+CAN-2002-0392 > http://securityresponse.symantec.com/avcenter/venc/data/freebsd.scalper.worm.html Ah, very informative. Thanks. I had missed this one :) > As I remember there were only a few hundred infections, and an Apache > patch was available within hours. Hardly the sort of Internet > destroying scale we've become accustomed to with all those Windows > worms recently. Thankfully, no :)