[NTLUG:Discuss] [Fwd: SANS Detects Dangerous Linux Worm]

[Greg Edwards]

Internet Week wrote:
> ***************************************************
> SANS Detects Dangerous Linux Worm
> 
> The SANS Institute's Global Incident Analysis Center uncovered a dangerous
> new worm Friday that appears to be spreading across the Internet.
> 
> The Lion worm scans the Internet looking for Linux computers with a known
> vulnerability. The worm then steals the password file, sending it to a
> China.com site. The worm reportedly installs other hacking tools and forces
> the infected machine to scan the Internet looking for other victims,
> according to SANS security experts. The worm also kills the syslogd file 
> so the logging on the system can't be trusted. --Rutrell Yasin
> 
> Read about how to detect the worm:
> http://update.internetweek.com/cgi-bin4/flo?y=eC8T0BiYgt0V30MBeL
> 

Anyone come across a system hit by this?  Is this a real threat or hype?

-- 
Greg Edwards <greg at nas-inet.com>