Information about the Lion Worm

Lion is a dangerous Linux worm (similar to ramen)that infects computers using a known TSIG
vulnerability discovered early in 2001 to spread.

lion3.tgz 8fc920c97f15b6fa30514590c687c638

Files to search:

• /dev/.lib
• /dev/.lib/1iOn.sh
• /bin/mjy
• /bin/in.telnetd
• *1iOn\.sh

*All files with an "*" need to be search in all system
**If you have any more information, send to: mail1, or to mail2.




$RootCheck: lion.php ,v 1.0 2003/12/02, Daniel B. Cid$