Re: ALERT - A DANGEROUS NEW WORM IS SPREADING ON THE INTERNET

[Atul Chitnis <achitnis@xxxxxxxxxxx>]

For RedHat Users:

Those of you who have been updating your installations whenever a security
advisory has appeared would be safe from this, since RH released a fix in
January itself:

http://www.redhat.com/support/alerts/lion_worm.html

For those of you who haven't - do it now.

Also, while the lionfind utility is a good thing to run, don't *bank* on
it. Things like this are mutated often to avoid detection. IN this case,
lionfind checks for *one* particular root-kit. If the kit is changed, it
bombs.

Reports of invasions in India are piling up. Complacency will be punished.

Atul

-- 
----------------------------------------------------------
Atul Chitnis       | achitnis@xxxxxxxxxxx (PGP:6011BCB8)
Exocore Consulting | http://www.exocore.com
Bangalore, India   | +91 (80) 3440397 Fax +91 (80) 3341137
----------------------------------------------------------