Linux worm

[Howard Lowndes]

On Tue, 1 Oct 2002, Adrian Blake wrote:

> Howard Lowndes wrote:
> > I think this might be a variant of the Linux Slapper worm.
> >
> > I have reported it to AUSCERT but they have not got back to me.
> >
> > Anyone running Apache SSl look for:
> >
> > /tmp/devnull
> > /tmp/sslx
> > /tmp/b/lis
> > /tmp/.god_you_make_me_laugh_cantin-boy
>
> add /tmp/.unlock

No, that is the Slapper_C variant.  What I have is another variant again.

Looking at the code it says that it is based in the bugtraq.c code, which
is Slapper_A.

BTW, Slapper_B is /tmp/.cinik

>
> I think, but not sure,   any comments ??
>
>
>
>
>

-- 
Howard.
LANNet Computing Associates - Your Linux people
Contact detail at http://www.lannetlinux.com
"Flatter government, not fatter government." - me
 Get rid of the Australian states.
------------------------------------------
If electricity comes from electrons, does morality come from morons?