Results 1 to 3 of 3
I found this on ./ today. Any thoughts? What precautions should we take? How do we know if we've been compromised? etc...
Linux Lupper.Worm
Jeremy...
- 11-08-2005 #1Linux Guru
- Join Date
- Mar 2003
- Location
- Wisconsin
- Posts
- 1,907
Linux Worm
I found this on ./ today. Any thoughts? What precautions should we take? How do we know if we've been compromised? etc...
Linux Lupper.Worm
JeremyRegistered Linux user #346571
"All The Dude ever wanted was his rug back" - The Dude
- 11-08-2005 #2
Just to be fair, this would be better titled "PHP WORM", since it is in no way connected with Linux, the Linux kernel, or any major distributions of Linux. Unless you're running a server with the vulnerable PHP utility, this doesn't affect you.
Aside from that, I can't really be much help. I just deal with desktops.
Registered Linux user #270181
TechieMoe's Tech Rants
- 11-08-2005 #3Just Joined!
- Join Date
- Jun 2005
- Location
- Canada, Halifax
- Posts
- 86
Doesn't sound like there is much to worry about. http://isc.sans.org/diary.php?storyid=823. If your system is up-to-date it appears that the vulnerability has already been addressed and if /tmp is mounted no-exec then you're immune even with the outdated, vulnerable package.


Reply With Quote
