Just an FYI - Apache Worm on the loose

Wed Jul 10 15:29:21 UTC 2002

On Tue, Jul 09, 2002 at 02:26:23PM -0700, jlegate at alienchick.com said:
> There is an Apache worm out there, and it uses port 2001/udp to operate.  You
> may wanna scan your own boxes for this open port.

Announced last week on BUGTRAQ and elsewhere.
http://online.securityfocus.com/archive/1/279529

(and was it _really_ necessary to post a hex dump of the entire thing? The
actual source is available linked from the BUGTRAQ post above ...)
-- 
-= Scott Francis || darkuncle (at) darkuncle (dot) net =-
  GPG key CB33CCA7 has been revoked; I am now 5537F527
        illum oportet crescere me autem minui
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20020710/3b68c47a/attachment.sig>