Linux worm

[Adrian Blake]

Howard Lowndes wrote:
> I think this might be a variant of the Linux Slapper worm.
> 
> I have reported it to AUSCERT but they have not got back to me.
> 
> Anyone running Apache SSl look for:
> 
> /tmp/devnull
> /tmp/sslx
> /tmp/b/lis
> /tmp/.god_you_make_me_laugh_cantin-boy

add /tmp/.unlock

I think, but not sure,   any comments ??




-- 
Adrian Blake
Snowy Technology Pty Ltd
37 Commissioner St.
P.O. Box 57
Cooma, NSW 2630
Ph 2-64-524338 mobile 0407 232 978