[ShadowAce]

[martin_fierro]

Just Another Vulnerability Announcement

[GeronL]

So.. does the malware this thing downloads work on Linux?

[perfect_rovian_storm]

For Linux – /etc/init.d/

I guess I must have already given this shady java app root permissions. I have to stop doing that.

[zeugma]

Interesting. Looking at the details, it needs root on unix systems to install itself in /etc/init.d/ also, it's pretty clear that though the code is obfuscated, the files themselves are not.

  sudo find /home -name jsuid.dat

... will definitely tell you if it's been installed.

Rule #1. Don't run as root!
Rule #2. Require a passwd for sudo!
Rule #3. If you don't need java, don't install it!

[BenLurkin]

What can be done about it?

[Swordmaker]

This appears to be a generic proof of concept example that’s been around for a couple of years designed to run on all three platforms. . . and requires a means of getting it onto each of them. A Trojan horse might do it. . . but requires the participation of a user with administrative access.

[Democrat_media]

interesting