Advanced

New Worm Targets Linux Web Service Holes

Posted by tadelste on · 5 comments
eWEEK Linux
Mail this story
Print this story

The Linux.Plupii worm is attacking Linux distributions via several Web service related holes.

Full Story

  Nav
» Read more about: Story Type: News Story

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (5)

The remote control opens on ports 7111 and 7222, and it doesn't do anything local except open a listener on one or the other of those ports (there are (so far) two variants, the only reported difference being that port number). If you (as I do) set your machines up with French Foreign Legion firewalling rules ("you shall do nothing except") then this won't be a problem for you.

I'm also seeing a lot of ssh login attempts recently, on those few machines I have which still run sshd on the default port.
It's a pretty punky threat. Poor little feeble thing.
Perhaps we can ask the authors to publish the source, so we can have a real threat for a change? (-:
heh, yes, after all the FOSS ideal "collaborate, improve, share" :)
Hey, I quoted you two in an article - actually you made the article since the majority of text is yours.

I thought it worked pretty well.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post