full-disclosure - OpenSSL Worm ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <001401c25b79$b21cd680$509a6dcf@infiniuminc.com>
From: epic at hack3r.com (EPiC)
Subject: OpenSSL Worm ?

Here is the apache one that is going around right now..   

check for /tmp/.bugtraq and .bugtraq.c

http://dammit.lt/apache-worm/apache-worm.c 


----- Original Message ----- 
From: "Ka" <ka@...dr.net>
To: <full-disclosure@...ts.netsys.com>
Sent: Friday, September 13, 2002 4:24 PM
Subject: [Full-Disclosure] OpenSSL Worm ?


> WARNING: Unsanitized content follows.
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Anybody got the source-code?
> 
> My God how I hate it to be dependent on those
> Symantec wise guys. The worm is allready in
> the wild but they won't publish it's code.
> How important they are, geeeeeee !!!
> 
> Ka
> - --
> "On an evening such as this
> it's hard to tell if I exist." Barenaked Ladies
> http://www.khidr.net/users/ka/pgpkey.asc
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.6 (GNU/Linux)
> Comment: For info see http://www.gnupg.org
> 
> iD8DBQE9gmW572vu22ltWBERAv5FAJ9yMtAw49ZaGulL0RPQ0hRHDN0++wCffNw4
> TXw1dPP05Gr+rawM+gG4FEw=
> =2lxs
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html