Re: New worm to affect RH

[Duncan Hill]

On 2001-04-03, Mitchell Henderson did say,

>       it exploits bind, lpd, statd, and wu-ftp 2.6.0 .  The basic
> signs are that it replaces /etc/cron.daily/0anacron with a hacked
> version of it to start the scans and such.  Also after a day of

Which version of bind?  I'm at 8.2.3-REL, but if I have to, I'll move
to 9.1.x.  None of the servers I run allow ftp connects.. its ssh/sftp
or nothing, so the wu part doesn't bother me.  However, I do have an
old AIX box that I can't upgrade.. oh well, its being retired in a
few.

-- 

Sapere aude
My mind not only wanders, it sometimes leaves completely.



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list