[linux-security] Re: *ALERT*: ADM Worm. Worm for Linux x86 found in wild.

[Ryan Fox <rfox noguska com>]

Jan-Philip Velders wrote:

>
> ---------- Forwarded message ----------
> Date: Thu, 25 Mar 1999 16:26:59 -0700
> From: "Ben Cantrick (Macky Stingray)" <mackys MACKY RONIN NET>
> To: BUGTRAQ NETSPACE ORG
> Subject: ADM Worm. Worm for Linux x86 found in wild.
>
> 1. Summary
>
>   On the week of 3/7, a polite mail from a system administrator at a
> company in Russia tipped me off to one of our Redhat boxes portscanning
> one of their subnets. Subsequent investigation found that a worm had
> infected the offending box and was attempting to propagate itself.
>
> 2. Further info
>
>   The files I have can be retrieved at:
>
> ftp://ftp.ronin.net/pub/admworm/admworm.tgz
>
>   This FTP server is on a low-speed line, and there is a 5 user
> simultanious limit. Keep trying. I assume someone will mirror the files
> to a faster server and announce the location here on Bugtraq for everyone's
> enjoyment.
>
>

File is now mirrored at ftp://216.28.98.11/pub/exploits/admworm.tgz .
Should be a bit easier to get to.

[mod: Watch your line lengths... -- REW]

--
Ryan Fox
Noguska

rfox noguska com