Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!uwm.edu!bionet!agate!ucbvax!pasteur!dog.ee.lbl.gov!elf.ee.lbl.gov!torek From: torek@elf.ee.lbl.gov (Chris Torek) Newsgroups: comp.unix.admin Subject: Re: Questions about UNIX viruses Message-ID: <11685@dog.ee.lbl.gov> Date: 2 Apr 91 18:33:00 GMT References: <1991Apr01.203128.13427@esleng.ocunix.on.ca> <1177@cthulhuControl.COM> Reply-To: torek@elf.ee.lbl.gov (Chris Torek) Organization: Lawrence Berkeley Laboratory, Berkeley Lines: 14 X-Local-Date: Tue, 2 Apr 91 10:33:00 PST In article <1177@cthulhuControl.COM> raisch@Control.COM (Robert Raisch) writes: >It should be noted that the [Internet] Worm used WELL KNOWN trapdoors and >flaws in systems software to attack. Both Sun and Dec were aware of these >security holes as far back as 1980. Oh really? Please produce some evidence to this effect. Also, for those of you who knew these so well, why did you not inform Berkeley CSRG? This is not intended as a flame on Robert Raisch; the rumor that the finger and sendmail bugs were `well known' goes around regularly, but seems to have no real grounds. -- In-Real-Life: Chris Torek, Lawrence Berkeley Lab CSE/EE (+1 415 486 5427) Berkeley, CA Domain: torek@ee.lbl.gov