httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From zeno <z...@cgisecurity.net>
Subject Re: [users@httpd] .cinik
Date Mon, 16 Dec 2002 04:53:16 GMT
You might want to read this.....

It appears to be a slapper worm variant.....
http://lists.insecure.org/lists/incidents/2002/Sep/0151.html
This explaints your bandwith....

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=.cinik
http://www.f-secure.se/virus/virusinfo.asp?Namn=Slapper

- zeno@cgisecurity.com

> 
> hi 
> 
> the "cinik" comes with the redhat 7.3 distribution. I suffered a lot for
> this. it comes with 7.3 redhats apache patch. starts trunsmitting to a
> hell lot of servers, causing the network a heavy traffic to both the local
> & remote server. 
> 
> Thanks & Best Regards,
> 
> Mohammad Wasiuddin Rajesh 
> System Administrator.
> 
> Net Access Bangladesh 
> http://www.netaccessbd.com 
> ThePerfectIsp.Net
> _________________________
> 
> On Mon, 16 Dec 2002, Peter B. West wrote:
> 
> > Hello all.
> > 
> > Does anyone have any idea where .cinik comes from or what it is supposed 
> > to be doing.  I run an httpd on my linux system (Redhat 7.3, apache 
> > 1.3.23) at home, purely as a training exercise.  I sometimes notice 
> > unusual network activity while connected (dialup ppp), and on a couple 
> > of occasions recently, the culprit has been .cinik, owned and run by 
> > apache.apache.  What's curious about .cinik is that it turns up in the 
> > strangest places: /tmp/.font-unix/.cinik/.cinik, 
> > /var/cache/httpd/.cinik, /var/lib/dav/.cinik.  Does anyone know where 
> > this thing comes from, or what it is doing?
> > 
> > Peter
> > -- 
> > Peter B. West  pbwest@powerup.com.au  http://www.powerup.com.au/~pbwest/
> > "Lord, to whom shall we go?"
> > 
> > 
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> >    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> > 
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message