Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: del on September 25, 2002, 05:27:26 AM

Title: Linux/Slapper-B virus
Post by: del on September 25, 2002, 05:27:26 AM
Has anyone heard of this virus? Will it infect E-smith server & gateway?
Can anyone recomend a virus program that is easy to install on E-smith?
Thanks in advanced
Title: Re: Linux/Slapper-B virus
Post by: Laurence Griffiths on September 25, 2002, 06:42:32 AM
Darrel May supplies a version of RAV Antivirus for SME servers.

Take a look at :-

http://myezserver.com/store/agora.cgi?cart_id=4824762.26539*Lp2Vz8&product=rav

As for the Slapper-B virus, take a look at :-

http://www.e-smith.org/article.php3&mode=threaded&order=0
Title: Re: Linux/Slapper-B virus
Post by: Cyrus Bharda on September 25, 2002, 06:46:40 AM
I have no idea on how slapper will affect SME boxes but I think that it wont as it exploits a openssh that is fixed in update 2 for 5.5 right? Anyway I have RAV installed and it is an awesome program, well worth paying for it after my trail ended!

http://myezserver.com/downloads/mitel/contrib/rav-8.3.2/

Cyrus Bharda
Title: Re: Linux/Slapper-B virus
Post by: Lloyd Keen on September 25, 2002, 09:10:50 AM
Search for and kill any running processes named:
.bugtraq

Delete these files, if they exist:
/tmp/.bugtraq
/tmp/.bugtraq.c
/tmp/.uubugtraq
Title: Re: Linux/Slapper-B virus
Post by: Charlie Brady on September 26, 2002, 12:42:27 AM
Lloyd Keen wrote:
>
> Search for and kill any running processes named:
> .bugtraq
>
> Delete these files, if they exist:
> /tmp/.bugtraq
> /tmp/.bugtraq.c
> /tmp/.uubugtraq

And if you find any of these thing (which I don't expect you will if you are running a current version including updates), be sure to report in detail to security@e-smith.com.

Thanks

Charlie