Path: utzoo!attcan!uunet!ncrlnk!ncrcae!ece-csc!mcnc!decvax!decwrl!ucbvax!ICAEN.UIOWA.EDU!dbfunk
From: dbfunk@ICAEN.UIOWA.EDU (David B. Funk)
Newsgroups: comp.sys.apollo
Subject: Computer virus
Message-ID: <8811050652.AA08798@umaxc.weeg.uiowa.edu>
Date: 5 Nov 88 06:09:48 GMT
Sender: daemon@ucbvax.BERKELEY.EDU
Organization: Iowa Computer Aided Engineering Network, University of Iowa
Lines: 30

Incase you've not been reading the news, there's a computer
virus running around the Internet. Here's an excerpt taken
from UUNET:

	Newsgroups: news.announce,news.sysadmin
	Date: Thu, 3 Nov 88 02:58:55 PST
	From: bostic@okeeffe.Berkeley.EDU (Keith Bostic)
	Subject: Virus (READ THIS IMMEDIATELY)
	Approved: spaf@cs.purdue.edu
	Distribution: world
	
	Description:
		There's a virus running around; the salient facts.  A bug in
		sendmail has been used to introduce a virus into a lot of
		Internet UNIX systems.  It has not been observed to damage the
		host system, however, it's incredibly virulent, attempting to
		introduce itself to every system it can find.  It appears to
		use rsh, broken passwords, and sendmail to introduce itself
		into the target systems.  It affects only VAXen and Suns, as
		far as we know.  

We Apollo-ites can sit this one out and smile though. The version of
sendmail that was distributed with SR9.5 Domain/IX does NOT have the
buggy "debug" code that this virius used to get around. I have not
checked out the SR10 version but I assume that it's OK also.
If you are connected to a network with VAXen or Suns you might want
to watch out, the virus can use the ".rhosts" and "host.equiv"
files on a infected host to try to get in to other systems.

    Dave Funk