You'd have to be completely unfirewalled to see damage

Story: New Worm Targets Linux Web Service HolesTotal Replies: 4
Author Content
AnonymousCoward

Nov 07, 2005
7:19 PM EDT
The remote control opens on ports 7111 and 7222, and it doesn't do anything local except open a listener on one or the other of those ports (there are (so far) two variants, the only reported difference being that port number). If you (as I do) set your machines up with French Foreign Legion firewalling rules ("you shall do nothing except") then this won't be a problem for you.

I'm also seeing a lot of ssh login attempts recently, on those few machines I have which still run sshd on the default port.
tuxchick

Nov 07, 2005
8:03 PM EDT
It's a pretty punky threat. Poor little feeble thing.
AnonymousCoward

Nov 08, 2005
3:26 AM EDT
Perhaps we can ask the authors to publish the source, so we can have a real threat for a change? (-:
tuxchick

Nov 08, 2005
9:07 AM EDT
heh, yes, after all the FOSS ideal "collaborate, improve, share" :)
tadelste

Nov 08, 2005
9:13 AM EDT
Hey, I quoted you two in an article - actually you made the article since the majority of text is yours.

I thought it worked pretty well.

Posting in this forum is limited to members of the group: [ForumMods, SITEADMINS, MEMBERS.]

Becoming a member of LXer is easy and free. Join Us!