The Lion worm

[Jerry Feldman]

Lion is a new worm, that is very similar to the Ramen worm. However, 
this worm is much more dangerous and should be taken seriously. It 
infects Linux machines with the BIND DNS server  running. It is known to 
infect bind version(s) 8.2, 8.2-P1, 8.2.1, 8.2.2-Px, and all 8.2.3-betas. The
 bind vulnerability is the TSIG vulnerability that was reported back on 
January 29, 2001. 

http://www.sans.org/y2k/lion.htm


Jerry Feldman <gaf at blu.org>
Associate Director
Boston Linux and Unix user group
http://www.blu.org
-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).