[sisyphus] Fwd: OpenSSL worm in the wild

[sisyphus] Fwd: OpenSSL worm in the wild

[Michael Shigorin]

[-- Attachment #1: Type: text/plain, Size: 1036 bytes --]

FYI

----- Forwarded message from Ben Laurie <ben@algroup.co.uk> -----

Date: Fri, 13 Sep 2002 18:16:33 +0100
From: Ben Laurie <ben@algroup.co.uk>
To: Bugtraq <BUGTRAQ@securityfocus.com>,
   Cryptography <cryptography@wasabisystems.com>,
   cypherpunks <cypherpunks@einstein.ssz.com>,
   Apache SSL <apache-ssl@lists.aldigital.co.uk>
Subject: OpenSSL worm in the wild

I have now seen a worm for the OpenSSL problems I reported a few weeks 
back in the wild. Anyone who has not patched/upgraded to 0.9.6e+ should 
be _seriously worried_.

It appears to be exclusively targeted at Linux systems, but I wouldn't 
count on variants for other systems not existing.

Cheers,

Ben.

-- 
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

----- End forwarded message -----

-- 
 ---- WBR, Michael Shigorin <mike@altlinux.ru>
  ------ Linux.Kiev http://www.linux.kiev.ua/

[-- Attachment #2: Type: application/pgp-signature, Size: 187 bytes --]