[iwar] FW: [VulnWatch] VulnWatch Alert - Apache-Koop Worm

From: snooker3 (snooker3@mindspring.com)
Date: 2002-06-28 19:33:50


Return-Path: <sentto-279987-4924-1025318034-fc=all.net@returns.groups.yahoo.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 [204.181.12.215] by localhost with POP3 (fetchmail-5.7.4) for fc@localhost (single-drop); Fri, 28 Jun 2002 19:36:12 -0700 (PDT)
Received: (qmail 1557 invoked by uid 510); 29 Jun 2002 02:33:42 -0000
Received: from n38.grp.scd.yahoo.com (66.218.66.106) by all.net with SMTP; 29 Jun 2002 02:33:42 -0000
X-eGroups-Return: sentto-279987-4924-1025318034-fc=all.net@returns.groups.yahoo.com
Received: from [66.218.67.192] by n38.grp.scd.yahoo.com with NNFMP; 29 Jun 2002 02:33:54 -0000
X-Sender: snooker3@mindspring.com
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-8_0_7_4); 29 Jun 2002 02:33:54 -0000
Received: (qmail 80797 invoked from network); 29 Jun 2002 02:33:54 -0000
Received: from unknown (66.218.66.218) by m10.grp.scd.yahoo.com with QMQP; 29 Jun 2002 02:33:54 -0000
Received: from unknown (HELO smtp10.atl.mindspring.net) (207.69.200.246) by mta3.grp.scd.yahoo.com with SMTP; 29 Jun 2002 02:33:54 -0000
Received: from sdn-ap-003neomahp0362.dialsprint.net ([63.186.17.108] helo=hto4me) by smtp10.atl.mindspring.net with esmtp (Exim 3.33 #1) id 17O83c-0002XN-00 for iwar@onelist.com; Fri, 28 Jun 2002 22:33:52 -0400
To: <iwar@yahoogroups.com>
Message-ID: <000301c21f15$680641d0$6c11ba3f@hto4me>
X-Priority: 1 (Highest)
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook, Build 10.0.3416
Importance: High
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
From: "snooker3" <snooker3@mindspring.com>
X-Yahoo-Profile: snooker81007
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Fri, 28 Jun 2002 20:33:50 -0600
Subject: [iwar] FW: [VulnWatch] VulnWatch Alert - Apache-Koop Worm
Reply-To: iwar@yahoogroups.com
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, hits=3.5 required=5.0 tests=X_MSMAIL_PRIORITY_HIGH,X_PRIORITY_HIGH,RISK_FREE,FREE_MONEY version=2.20
X-Spam-Level: ***

-----Original Message-----
From: Steve [mailto:steve@entrenchtech.com] 
Sent: Friday, June 28, 2002 5:36 PM
To: vulnwatch@vulnwatch.org
Subject: [VulnWatch] VulnWatch Alert - Apache-Koop Worm
Importance: High

It seems that there is a new worm floating around exploiting the new
Apache chunked encoding issue.

http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0109.html

The worm hasn't been officially named but many have referred to it as
the "Koop Worm".  It was first seen on a honeypot by Domas Mituzas and
details are available here;

http://dammit.lt/apache-worm/

If you haven't already patched you systems now is a good time.


Regards


Steve Manzuik
Moderator - Vulnwatch

============================
CSICON - www.csicon.net
============================


RWM


------------------------ Yahoo! Groups Sponsor ---------------------~-->
Free $5 Love Reading
Risk Free!
http://us.click.yahoo.com/3PCXaC/PfREAA/Ey.GAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2003-08-24 02:46:33 PDT