[ILUG] Porting MyDoom to Linux

[Nick Murtagh]

Frank Boehme wrote:
> * Convince the victim to unpack and execute binary mail attachments

That's easy if the users aren't security conscious. Most windows
users aren't. The assumption is that most linux distribution users
are, but that won't be true forever.

> * Do all this without write access to /etc. We are not root.

We can get root with a local exploit. There have been a few of these
discovered recently. There are probably lots of vulnerable linux
desktops out there at the moment.


Nick