|
|
|
VIRUS NAME: Linux/Exploit-Su
Trojan
Characteristics
The Linux/Su trojan
was included inside a virus collector set that was sent to AVERT. The
exploit code has not been encountered "in the wild".
This code is meant for the Linux Redhat flavor.
The exploit tries to remotely access/create /tmp/xp and to changes permissions,
get root access, modifying /bin/su.
Comments inside the source indicate that the exploit was written back
in 2001.
Usually Unix malware is very flavor/version/kernel specific, newer versions
and/or security updates address many exploits.
|
|
|
