RE: [expert] OT: /root

2000-05-15 Thread John Aldrich

On Mon, 15 May 2000, you wrote:
> 
> Doesn't this still require the user to open an attachment?  Meaning that
> most linux/unix root users would know better to not just run any file that
> was sent to them.
> 
AFAIK, there is no application in Linux/Unix/etc that runs
VB Scripts. I could be wrong, but going by what I know,
there is no such thing as a VB Script for *nix.
John




RE: [expert] OT: /root

2000-05-15 Thread GAGLIANO, ANGELO
Title: RE: [expert] OT: /root





Doesn't this still require the user to open an attachment?  Meaning that most linux/unix root users would know better to not just run any file that was sent to them.

Angelo



-Original Message-
From: Michael Holt [mailto:[EMAIL PROTECTED]]
Sent: Monday, May 08, 2000 2:05 AM
To: [EMAIL PROTECTED]
Subject: Re: [expert] OT: /root



Pj wrote:
> 
> I know the guru's already know the "Love Bug" copycat has been ported to
> Linux, so this isn't for you.
> 
> The new versions are called "Jokes" and "Mother's Day Order
> Confirmation." The bad news for Linux users is if you read your mail in
> /root and NOT as /user - you are vunerable. Nuff said.
> 
> Pj
> [EMAIL PROTECTED]


I was under the impression that 'love bug' was written using VB sript
and took advantage of the scripting host in Outlook Express... how then
would that affect Linux?


Mike
-- 
==
Michael Holt
[EMAIL PROTECTED]
Kirkland, WA
==
The Penguins are coming!!!
==





Re: [expert] OT: /root

2000-05-08 Thread Michael Holt

Oh yeah - no doubt that you shouldn't do ANYTHING as root unless it's
system administration - that's always a good rule to live by.  I was
just curious as to the nature of a port of a virus written specifically
for Windows; it's hard enough to get ports for everyday programs that
have been around forever!  I'm not saying it's not possible or hasn't
happened, it's just that, with all due respect, that's how urban legends
get started.  Just for educational purposes, if anybody has anymore info
on this, I wouldn't mind hearing more about it.

Thanks, Mike

Pj wrote:
> 
> Mike,
> 
> I'm not a programmer or expert. My Linux guru and several friends who
> own ISP's; run some flavor of *NIX on servers and their own machines
> sent the warnings. I believe them. My own guru said as long as I read
> mail only as /user I am safe. I believe him. He then explained why /user
> was safe and /root wasn't. I didn't understand it, but I'm looking
> forward to the day when I do.
> 
> In the meantime that's why he's the guru and I'm the newbie. He says; I
> do and it's a perfect relationship. My L-M machine runs better than
> Winblows ever did.
> 
> MANDRAKE ROCKS!!!
> 
> Pj
> 
> Michael Holt wrote:
> >
> > Pj wrote:
> > >
> > > I know the guru's already know the "Love Bug" copycat has been ported to Linux, 
>so this isn't for you.
> > >
> > > The new versions are called "Jokes" and "Mother's Day Order
> > > Confirmation." The bad news for Linux users is if you read your mail in
> > > /root and NOT as /user - you are vunerable. Nuff said.
> > >
> > > Pj
> > > [EMAIL PROTECTED]
> >
> > I was under the impression that 'love bug' was written using VB sript
> > and took advantage of the scripting host in Outlook Express... how then
> > would that affect Linux?
> >
> > Mike

-- 
==
Michael Holt
[EMAIL PROTECTED]
Kirkland, WA
==
The Penguins are coming!!!
==



Re: [expert] OT: /root

2000-05-08 Thread Charles Curley

Pj, I just checked DataFellows' web site and did not see any reference to
the notion that the Love Bug worm runs on Linux.

I am highly skeptical that it does for two reasons: 1) It is VBScript
based, and I am not aware of any VB Script interpreters for Linux other
than Netscape. 2) Few, if any, Linux based mail readers will automatically
run an unknown attachment. Mutt, PIne, Elm and RM and VM for Emacs do
not. I am skeptical that any mail readers do. If they do, they would
require user or administrator setup for the locations of the script
interperters.

Would you please ask your friends where they got this information? I
expect that the ISPs on the list might like to know so they can determine
for themselves whether the threat is real.


On Mon, May 08, 2000 at 02:33:59AM -0500, Pj wrote:
-> Mike,
-> 
-> I'm not a programmer or expert. My Linux guru and several friends who
-> own ISP's; run some flavor of *NIX on servers and their own machines
-> sent the warnings. I believe them. My own guru said as long as I read
-> mail only as /user I am safe. I believe him. He then explained why /user
-> was safe and /root wasn't. I didn't understand it, but I'm looking
-> forward to the day when I do. 
-> 
-> In the meantime that's why he's the guru and I'm the newbie. He says; I
-> do and it's a perfect relationship. My L-M machine runs better than
-> Winblows ever did. 
-> 
-> MANDRAKE ROCKS!!!
-> 
-> Pj
-> 
-> Michael Holt wrote:
-> > 
-> > Pj wrote:
-> > >
-> > > I know the guru's already know the "Love Bug" copycat has been ported to Linux, 
so this isn't for you.
-> > >
-> > > The new versions are called "Jokes" and "Mother's Day Order
-> > > Confirmation." The bad news for Linux users is if you read your mail in
-> > > /root and NOT as /user - you are vunerable. Nuff said.
-> > >
-> > > Pj
-> > > [EMAIL PROTECTED]
-> > 
-> > I was under the impression that 'love bug' was written using VB sript
-> > and took advantage of the scripting host in Outlook Express... how then
-> > would that affect Linux?
-> > 
-> > Mike
-> > --
-> > ==
-> > Michael Holt
-> > [EMAIL PROTECTED]
-> > Kirkland, WA
-> > ==
-> > The Penguins are coming!!!
-> > ==

-- 

-- C^2

No windows were crashed in the making of this email.

Looking for fine software and/or web pages?
http://w3.trib.com/~ccurley



Re: [expert] OT: /root

2000-05-08 Thread Ron Marriage

Not being a guru, I guess, I have to ask.
Where did you hear that this thing was ported to linux and
how did they accomplish this.
It's a visual basic program that takes advantage of a
security hole in MS Windows and Outlook.

Just curious.
Ron


On Mon, 08 May 2000, you wrote:
> I know the guru's already know the "Love Bug" copycat has been ported to
> Linux, so this isn't for you. 
> 
> The new versions are called "Jokes" and "Mother's Day Order
> Confirmation." The bad news for Linux users is if you read your mail in
> /root and NOT as /user - you are vunerable. Nuff said. 
> 
> Pj
> [EMAIL PROTECTED]

-- 

Ron Marriage
E-Mailmailto:[EMAIL PROTECTED]
Homepage  http://www.seidata.com/~marriage




Re: [expert] OT: /root

2000-05-08 Thread Pj

Mike,

I'm not a programmer or expert. My Linux guru and several friends who
own ISP's; run some flavor of *NIX on servers and their own machines
sent the warnings. I believe them. My own guru said as long as I read
mail only as /user I am safe. I believe him. He then explained why /user
was safe and /root wasn't. I didn't understand it, but I'm looking
forward to the day when I do. 

In the meantime that's why he's the guru and I'm the newbie. He says; I
do and it's a perfect relationship. My L-M machine runs better than
Winblows ever did. 

MANDRAKE ROCKS!!!

Pj

Michael Holt wrote:
> 
> Pj wrote:
> >
> > I know the guru's already know the "Love Bug" copycat has been ported to Linux, so 
>this isn't for you.
> >
> > The new versions are called "Jokes" and "Mother's Day Order
> > Confirmation." The bad news for Linux users is if you read your mail in
> > /root and NOT as /user - you are vunerable. Nuff said.
> >
> > Pj
> > [EMAIL PROTECTED]
> 
> I was under the impression that 'love bug' was written using VB sript
> and took advantage of the scripting host in Outlook Express... how then
> would that affect Linux?
> 
> Mike
> --
> ==
> Michael Holt
> [EMAIL PROTECTED]
> Kirkland, WA
> ==
> The Penguins are coming!!!
> ==



Re: [expert] OT: /root

2000-05-08 Thread Mage Grimau

No - that is a hoax. The virus/worm has NOT been ported to linux. It requires
the Windows Scripting Host (Windows Security Hole) to function. It's only
threat to non-windows systems is that Windows clients can swamp the mail
system with crap. The "Jokes" and "Mother's Day Order Confirmation" variants
merely make it more reasonable for someone to run the script.

--- Pj <[EMAIL PROTECTED]> wrote:
> I know the guru's already know the "Love Bug" copycat has been ported to
> Linux, so this isn't for you. 
> 
> The new versions are called "Jokes" and "Mother's Day Order
> Confirmation." The bad news for Linux users is if you read your mail in
> /root and NOT as /user - you are vunerable. Nuff said. 
> 
> Pj
> [EMAIL PROTECTED]

=
Mage Grimau, Strange Unwashed & Somewhat Slightly Dazed
VoiceMail/Fax: 1-651-328-1145

__
Do You Yahoo!?
Send instant messages & get email alerts with Yahoo! Messenger.
http://im.yahoo.com/



Re: [expert] OT: /root

2000-05-08 Thread Mage Grimau

The virus/worm is dependent on the Windows Scripting Host (Windows Security
Hole). The major cause for concern for linux admins is that if your users are
clueless Windows users and use Outlook as their mail client you can get
swamped with a lot of crap email. All other stories of it being ported to
linux/Unix are a hoax, as of 4/8/2000.


--- Michael Holt <[EMAIL PROTECTED]> wrote:
> Pj wrote:
> > 
> > I know the guru's already know the "Love Bug" copycat has been ported to
> > Linux, so this isn't for you.
> > 
> > The new versions are called "Jokes" and "Mother's Day Order
> > Confirmation." The bad news for Linux users is if you read your mail in
> > /root and NOT as /user - you are vunerable. Nuff said.
> > 
> > Pj
> > [EMAIL PROTECTED]
> 
> I was under the impression that 'love bug' was written using VB sript
> and took advantage of the scripting host in Outlook Express... how then
> would that affect Linux?
> 
> Mike
> -- 
> ==
> Michael Holt
> [EMAIL PROTECTED]
> Kirkland, WA
> ==
> The Penguins are coming!!!
> ==

=
Mage Grimau, Strange Unwashed & Somewhat Slightly Dazed
VoiceMail/Fax: 1-651-328-1145

__
Do You Yahoo!?
Send instant messages & get email alerts with Yahoo! Messenger.
http://im.yahoo.com/



Re: [expert] OT: /root

2000-05-07 Thread Michael Holt

Pj wrote:
> 
> I know the guru's already know the "Love Bug" copycat has been ported to
> Linux, so this isn't for you.
> 
> The new versions are called "Jokes" and "Mother's Day Order
> Confirmation." The bad news for Linux users is if you read your mail in
> /root and NOT as /user - you are vunerable. Nuff said.
> 
> Pj
> [EMAIL PROTECTED]

I was under the impression that 'love bug' was written using VB sript
and took advantage of the scripting host in Outlook Express... how then
would that affect Linux?

Mike
-- 
==
Michael Holt
[EMAIL PROTECTED]
Kirkland, WA
==
The Penguins are coming!!!
==