Linux Virus?

[Druid]

Just found this article on the BBC website.

I didn't think you could get a virus to work on Linux (but I'm no expert by any means)

[Calum]

it's not really a virus.

 

quote:Like many other malicious programs, the worm is exploiting a vulnerability that has been known about for some while.

The loophole was first discovered in August and patches for it were posted soon after. Anyone using OpenSSL up to and including versions 0.9.6d or 0.9.7beta1 is strongly advised to upgrade to the newest version.

and this is why, if people are sensible, it won't be a huge problem.

One little mistake in the BBC article, they say apache is 'linux based' which is horseshit. apache is platform independent. it is most widely associated with linux because (am i right on this?) that was the platform it was developed on. It can run on windows as well, for example, however of course this vulnerability would be instantly trivial if it was windows related, compared with all the other vulnerabilities it has in its own right.

[mobrien_12]

It's not really a "virus."   To put it simply, it's an automated system cracking program exploiting an old vulnerability.  It's just automatically doing what any script kiddie could do with the right tools.  Anyone who keeps up with their security updates is immune.

[rtgwbmsr]

It's an exploit, not a virus.
Definitions:

Virus: program that searches out other programs and "infects" them by embedding a copy of itself in them

Exploit: A security hole or an instance of taking advantage of a security hole.

BTW: Check out my new sig...I finally made up something catchy!

[Pantso]

First of all, a virus is different than a worm or a trojan by definition. Secondly, all security vulnerabilities in Linux are discovered and fixed very quickly so as long as you keep your system updated you won't have any problems    .

[choasforages]

i owuld agree, i heard that the exploit had been fixed months ago, update yer software people

[Master of Reality]

hey, does anyone know where/who the site/guy is that gives a reward if you email him a virus that actually works to email him at another account (and yerself) and makes a file somewhere that say "Virus was here"????????????