Re: a weird script worm uploaded via php with debian 3.0 ?

[Giacomo Mulas <gmulas@ca.astro.it>]

On Wed, 11 Jun 2003, Phillip Hofmeister wrote:

> While I agree with your observation I feel compelled to defend his
> point.
>
> He said mounting /tmp will stop MOST Trojans.  While it might not stop a
> trojan planted by a person, it will stop a trojan planted by a worm
> (which is what this thread is about) since the author of the worm might
> not have had the insight to use ld.so.

I see what you mean, in this sense he is obviously right.

Bye
Giacomo

-- 
_________________________________________________________________

Giacomo Mulas <gmulas@ca.astro.it>
_________________________________________________________________

OSSERVATORIO ASTRONOMICO DI CAGLIARI
Str. 54, Loc. Poggio dei Pini * 09012 Capoterra (CA)

Tel. (OAC): +39 070 71180 248     Fax : +39 070 71180 222
Tel. (UNICA): +39 070 675 4916
_________________________________________________________________

"When the storms are raging around you, stay right where you are"
                         (Freddy Mercury)
_________________________________________________________________