lkml.org 
[lkml]   [1997]   [Feb]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: [masq] 1st virus in Linux :( (fwd)
Date
> 
> First: see the linux-security list if you're really interested in this.

Maybe still remotely interesting for this list - the output of strings
run on the posted bliss executable contains some fragments that look
as if the virus tries to modify the kernel sources such that a call
to umask(2) with the appropriate parameter will set uid/gid/euid/egid
to root. I didn't verify that bliss acctually does this but just the
thought ...

Ralf

\
 
 \ /
  Last update: 2005-03-22 13:38    [W:0.063 / U:0.364 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site