Search /
Advanced search  |  Help  |  Site map
Click for Layer 8! No, really, click NOW!
Networking for Small Business
While Heartbleed distracts, hackers hit US universities
Survey respondents shun much-hyped mobile shopping technologies
How Apple's billion dollar sapphire bet will pay off
US to vote on sharp increase in broadband subsidies
iPhone 6 rumor rollup for the week ending April 18
NSA spying revelations have tired out China's Huawei
Arista co-founder may have switch maker by its jewels
Apple kicks off public OS X beta testing
Open source pitfalls – and how to avoid them
AT&T's expanded 1 Gbps fiber rollout could go head to head with Google
BlackBerry Releases BES 10 Security Update to Address 'Heartbleed' Flaw
Verizon: Web apps are the security punching bag of the Internet
Cisco announces security service linked with new operations centers
Dell launches virtual storage accelerator, aims to boost SAN performance
Free OS X Mavericks now powers half of all Macs
Even the most secure cloud storage may not be so secure, study finds  
3D printing will transform these five industries
Most but not all sites have fixed Heartbleed flaw
NEC launches face-recognition protection for PCs
Hundreds of medical professionals targeted in multi-state tax scam
Super-high frequencies could one day deliver your mobile video
Americans cool with lab-grown organs, but not designer babies
IT Departments Not Losing Ground to Managed Service Providers (Yet)
Where's my gigabit Internet, anyway?
IE6: Retired but not dead yet

P2P worm targets Linux Apache Web servers

Related linksToday's breaking news
Send to a friendFeedback

A computer worm dubbed Linux.Slapper.Worm has started to spread on the Internet by exploiting the Linux Apache Web server vulnerabilities that are related to the OpenSSL protocol. The vulnerabilities were first detailed July 30 by The OpenSSL Group.

According to antivirus firm Symantec, the Linux.Slapper.Worm is the first worm to make use of peer-to-peer networking technology, which has allowed infected servers to maintain contact. This would potentially give a hacker control of a constellation of infected boxes.

The worm, which is still being analyzed, can capture e-mail addresses and could potentially do greater harm, says Oliver Friedrichs, senior manager at the Symantec Security response division. Symantec said that on Friday there were at least 2,000 infections from the worm, which was first reported in Portugal and Romania.

The worm can infect Linux servers from companies such as Red Hat, Mandrake, Caldera, Slackware and Debian that have not been upgraded to the 0.9.6g version of the OpenSSL Group's software for Secure Sockets Layer. That upgrade fixes the vulnerabilities detailed on July 30.

The worm is raising particular concern because "it has its own peer-to-peer networking protocol," said Friedrichs. "Potentially, someone can inject a command into the peer-to-peer network and send it to the compromised hosts."

Symantec is still examining the Linux.Slapper.Worm to better understand how dangerous it is. The worm spreads like the well-known Nimda worm, which started a year ago, by scanning. That scanning activity might result in some denial-of-service problems.

But unlike Nimda, which is still active and infects vulnerable Microsoft Internet Information Servers, the Linux.Slapper.Worm is said to go one step further and set up links among the Linux machines it infects. Symantec said it intends to issue periodic updates on what it discovers about Linux.Slapper.Worm.


NWFusion offers more than 40 FREE technology-specific email newsletters in key network technology areas such as NSM, VPNs, Convergence, Security and more.
Click here to sign up!
New Event - WANs: Optimizing Your Network Now.
Hear from the experts about the innovations that are already starting to shake up the WAN world. Free Network World Technology Tour and Expo in Dallas, San Francisco, Washington DC, and New York.
Attend FREE
Your FREE Network World subscription will also include breaking news and information on wireless, storage, infrastructure, carriers and SPs, enterprise applications, videoconferencing, plus product reviews, technology insiders, management surveys and technology updates - GET IT NOW.