Linux/Slapper Worm

 Information about the Linux/Slapper worm:

Linux/Slapper is a worm. This worm infects Linux systems running Apache web service on Red Hat, SuSE, Mandrake, Slackware and Debian types. This worm will not work on Windows. The worm achieves this by exploiting a vulnerability in OpenSSL component where "Secure Sockets Layer" SSL is enabled.

The worm tries to connect on the port 80. If the server is running Apache service then it tries to connect on port 443 and send the required code to the SSL service.

Later on the worm attempts to put any one of the following files into the /tmp directory.

bugraq bugtraq.c uubugtraq

Once the worm is active then UDP port 2002 will be open for attacks.

This worm first appeared on 16th Sept. 2002.

 Other names of Linux/Slapper worm:

This worm is also known as Apache/Mod_ssl worm, Linux.Slapper.Worm, ELF_SLAPPER.A and Linux.Slapper-A.