[Ayuda] Linux Worm Spreading, Many Systems Vulnerable (fwd)

[Gunnar Wolf <gwolf en campus iztacala unam mx>]

Hola,

Les reenvio este mensaje. Les sugiero fuertemente actualizar sus sistemas,
supongo que ya practicamente cualquier distribucion saco paquetes tapando
este hoyo.

Los paquetes que actualizó Debian en respuesta a esta vulnerabilidad, si
no me equivoco, fueron los relacionados con Apache, con mod_ssl y con
PostgreSQL., por si les sirve de guia.

Saludos,

-- 
Gunnar Wolf - gwolf en campus iztacala unam mx - (+52-55)5623-1118
PGP key 1024D/8BB527AF 2001-10-23
Fingerprint: 0C79 D2D1 2C4E 9CE4 5973  F800 D80E F35A 8BB5 27AF

---------- Forwarded message ----------
Date: Tue, 17 Sep 2002 11:40:23 -0500 (CDT)
From: UNAM-CERT <unam-cert en seguridad unam mx>
Reply-To: asc-l en seguridad unam mx
To: asc-l en seguridad unam mx
Subject: [Asc-l] Linux Worm Spreading, Many Systems Vulnerable (fwd)

-----BEGIN PGP SIGNED MESSAGE-----



- --
Juan Carlos Guel Lopez
UNAM-CERT
Equipo de Respuesta a Incidentes UNAM
DGSCA, UNAM                     E-mail: unam-cert en seguridad unam mx
Circuito Exterior, C. U.        Tel.: 5622-81-69  Fax: 5622-80-43
Del. Coyoacan                   WWW: http://www.seguridad.unam.mx
04510 Mexico D. F.              WWW: http://www.unam-cert.unam.mx

- ---------- Forwarded message ----------
Date: Sat, 14 Sep 2002 00:09:08 -0300 (EST)
From: Jacomo Dimmit Boca Piccolini <jacomo en cais rnp br>
To: first-teams en first org
Subject: Linux Worm Spreading, Many Systems Vulnerable


Hi Teams,

Does anyone have a copy of this worm?

Thanks,

- -- Jacomo, CAIS/RNP



http://slashdot.org/article.pl?sid=02/09/13/2315246

Linux Worm Spreading, Many Systems Vulnerable

Posted by timothy on Friday September 13, @07:59PM
from the patchy-patchy dept.

sverrehu writes "A GNU/Linux worm exploiting a bug in OpenSSL spreads
through vulnerable Apache web servers, according to Symantec. The worm,
which was first reported in Europe, targets several popular Linux
distributions. See also the SecurityFocus vulnerability listing for the
OpenSSL bug." sionide also writes: "Netcraft recently published a report
which explains that a large portion of Apache systems are still unpatched
(halfway down). To protect yourself please upgrade to OpenSSL 0.9.6g."


More information:

http://securityresponse.symantec.com/avcenter/venc/data/linux.slapper.worm.html





- -+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+
This message was posted through the FIRST mailing list server.
Contact your team's FIRST representative to (un)subscribe,

DO NOT REDISTRIBUTE BEYOND MEMBERS OF FIRST TEAMS UNLESS THE AUTHOR OF
THIS MESSAGE GRANTS EXPRESS PERMISSION TO REDISTRIBUTE
- -+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+


-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: cp850

iQEVAwUBPYdbBnAvLUtwgRsVAQFW/wf/S1x9ER100tUTegyFCyGZK6upQ1nDtVJi
w3JnmkmwgtoNnanXdP8V8zauXsz3LG+rPQosxPBp0CD6OGWvDELv8Eg0vwX+8xy3
PQLoFZ8KLLmNk5zLxk+ShYXpBhlxK/EngADagH/oU8LQvqMtwZdIJnUJBcIRVQO3
oO56tIlhX9/TxnuuSdCJCNjVKQI0gBOevk6/jO+NwwyAyOefusmoDG2GUfzFdN3q
t/Lng8f5aQXeb6LPqhYMReXdkeWzwP1ELkz9OChcvBqIrmzGQ9KN7M87j4YrTdmg
16cBKUwrYNzrbD8hR+Xp1LxNpJBKv9eM4p6bb197VOosRWs8b3+IdQ==
=4imX
-----END PGP SIGNATURE-----


_______________________________________________
Lista de Correo Asc-l

Mensajes a esta lista : Asc-l en seguridad unam mx
Archivos historicos :http://www.seguridad.unam.mx/mailman/listinfo/asc-l
Dar de baja de esta lista : http://www.seguridad.unam.mx/unsubscribe.html
_______________________________________________

_______________________________________________
Ayuda mailing list
Ayuda en linux org mx
Para salir de la lista: http://mail.linux.org.mx/mailman/listinfo/ayuda/