DO NOT (I repeat) DO NOT OPEN the index.htm file I sent in my previous
post... It's infected with a copy of SunOS/BoxPoison.worm AND it seems it's
coming from one of our distributions of Tomcat 3.2.x...
I'm still digging thru it...
Pier
Pier P. Fumagalli at [EMAIL PROTECTED] wrote:
> Here's what it seems they did with the exploit... Rerolling the binaries
> *balls of Tomcat putting a new index.htm...
>
> I'm downloading the supposedly wrong binary as we speak, but it's kinda slow
> from my 56kbps connection...
>
> Fuck shit...
>
> Pier