Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Slapper.B Worm Variant: OpenSSL and Apache Threat on Linux Systems

Calendar Sep 23, 2002 • User Avatar Anthony Pell
1 min read
General Esm H446
Topics%20covered

Topics Covered

security advisory malware OpenSSL Apache worm Linux Slapper B
ISS X-Force has learned of the existence of a variant of the "Slapper" (also known as Slapper.A) worm that X-Force documented in a X-Force Security Alert on September 14, 2002. The new variant, named Slapper.B, has several subtle differences from the first Slapper worm, but it is for the most part an updated version of its predecessor. . . . ISS X-Force has learned of the existence of a variant of the "Slapper" (also known as Slapper.A) worm that X-Force documented in a X-Force Security Alert on September 14, 2002. The new variant, named Slapper.B, has several subtle differences from the first Slapper worm, but it is for the most part an updated version of its predecessor. Both versions carry the same attack payload and attempt to exploit a previously disclosed vulnerability in the Secure Sockets Layer 2.0 (SSLv2) handshake process. Slapper.A and Slapper.B both target the Linux operating system running the Apache Web server with OpenSSL.

The link for this article located at ISS is no longer available.