Linux Viruses and Such

• Malware Timeline (cont'd)

• 2001-3: Eleven network worms aimed almost entirely at Red Hat. (Details at my site.) Attacked obsolete versions of wu-ftpd, BIND8, NFS, lpd, LPRng, OpenSSL, Samba, OpenSSH, qpopper, wu-imapd. All holes had been patched months or years earlier. Claim made (Ryan Russell) that two of these (1i0n, lpdw0rm) subverted “thousands” of RH boxen when est. # of Linux installations was 10-20 million. Pundit Laura DiDio asserts that 2002 Slapper/Cinik attack on OpenSSL w/Apache subverted 20,000. (Symantec says 3,500.)

Notes: