FW: OpenSSL worm

Sat Sep 14 03:05:15 UTC 2002

I also received advisory from dshield, it'd be usefull for others to see too:

> Date: Fri, 13 Sep 2002 20:37:13 -0400
> From: Johannes Ullrich <jullrich at euclidian.com>
> To: dshieldannounce at dshield.org
> Subject: [Dshieldannounce] openssl advisory
> 
> we are tracking an increase in exploits of apache web servers via
> a vulnerability is mod_ssl.
> 
> details: http://isc.incidents.org/analysis.html?id=167

On Fri, 13 Sep 2002, Avery Buffington wrote:

> 
> 
> passing this along for those who may have not seen it yet
> 
> -----Original Message-----
> From: Hal Flynn [mailto:flynn at securityfocus.com]
> Sent: Friday, September 13, 2002 12:23 PM
> To: focus-linux at securityfocus.com
> Subject: OpenSSL worm
> 
> 
> For those of you not aware, there has been a report of an OpenSSL worm in
> the wild.  Discussion is on Bugtraq currently.
> 
> Cheers,
> 
> Hal Flynn
> Symantec Corp.
> 
> "....You guys are the Marine's doctors; There's no better in the business
> than a Navy Corpsman...."
>   -- Lieutenant General Lewis B. "Chesty" Puller, U.S.M.C.
> 