Slashdot Mirror


New Linux Worm Found in the Wild

randomErr writes "The worms, Slapper.B and Slapper.C, which exploits a known buffer overrun vulnerability in the Secure Sockets Layer 2.0 (SSLv2) handshake process has infected thousands of Web servers worldwide, according to Helsinki-based F-Secure Corp., a computer and network security company. "

2 of 366 comments (clear)

  1. Re:Finally by aivic · · Score: 0, Offtopic

    Linux can be utilized as a Desktop OS!

    I can do everything virtually in Linux what I can do in Windows.

    Theres only little in the field of capturing/encoding divx movies and graphical download managers, but I might be wrong there since I havent bothered to look.

    I also have to give a lecture on the slapper worm in a couple weeks and I havent really started my presentation notes :(

    Wish me LUCK!

  2. I've never understood... by HarryLeBlanc · · Score: 0, Offtopic
    ...why buffer overflow viruses are such a common vulnerability in software. Yes, I grok how they work, but their effectiveness depends on knowing in advance exactly how big the buffer is.

    It would be trivially easy to write a function to randomly assign buffersize based on parameters (say, min max and optimal size), and even change its size periodically at runtime. That would eliminate this entire class of attack.