Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 28 Jun 2002 18:03:28 -0600
From:      Brett Glass <brett@lariat.org>
To:        Jonas M Luster <jluster@d-fensive.com>, Domas Mituzas <domas.mituzas@microlink.lt>
Cc:        bugtraq@securityfocus.com, freebsd-security@FreeBSD.ORG
Subject:   Re: apache-worm.c
Message-ID:  <4.3.2.7.2.20020628180253.038e7af0@localhost>
In-Reply-To: <20020628165815.A34506@baysec.org>
References:  <20020628222723.G59739-100000@axis.tdd.lt> <20020628222723.G59739-100000@axis.tdd.lt>

next in thread | previous in thread | raw e-mail | index | archive | help
At 05:58 PM 6/28/2002, Jonas M Luster wrote:

>This seems to be a different source than the one, the binary was
>compiled from. The binary uses a lynx version string while this one
>uses User-Agent: Mozilla/4.75 [en] instead.

Aha! Perhaps the worm's author was seeking to mislead Domas, and
others, about what it did and how.

--Brett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.3.2.7.2.20020628180253.038e7af0>