Advanced

You'd have to be completely unfirewalled to see damage

Story: New Worm Targets Linux Web Service HolesTotal Replies: 4
Author Content
AnonymousCoward

Nov 07, 2005
6:19 PM EST
The remote control opens on ports 7111 and 7222, and it doesn't do anything local except open a listener on one or the other of those ports (there are (so far) two variants, the only reported difference being that port number). If you (as I do) set your machines up with French Foreign Legion firewalling rules ("you shall do nothing except") then this won't be a problem for you.

I'm also seeing a lot of ssh login attempts recently, on those few machines I have which still run sshd on the default port.
tuxchick

Nov 07, 2005
7:03 PM EST
It's a pretty punky threat. Poor little feeble thing.
AnonymousCoward

Nov 08, 2005
2:26 AM EST
Perhaps we can ask the authors to publish the source, so we can have a real threat for a change? (-:
tuxchick

Nov 08, 2005
8:07 AM EST
heh, yes, after all the FOSS ideal "collaborate, improve, share" :)
tadelste

Nov 08, 2005
8:13 AM EST
Hey, I quoted you two in an article - actually you made the article since the majority of text is yours.

I thought it worked pretty well.

Post a reply to this thread:

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post