The Sadmind worm was a computer worm which exploited vulnerabilities in both Sun Microsystems' Solaris (Security Bulletin 00191, CVE-1999-0977) and Microsoft's Internet Information Services (MS00-078, CVE-2000-0884), for which a patch had been made available seven months earlier. It was discovered on May 8, 2001.^[4]

Specifically, the virus affected the sadmind daemon on Solaris systems which had sadmind enabled in inetd.conf, since the sadmind daemon normally ran with root privileges.^[5]

The worm defaced web servers with a message against the United States government^[6] and the anti-Chinese cracking group PoizonBOx.^[7]

Systems affected by version

Microsoft (IIS):

• Version 4.0^[8]
• Version 5.0

Sun Microsystems (Solaris):

• Version 2.3
• Version 2.4^[9]

See also

• Timeline of computer viruses and worms
• Computer viruses

References

External links

• CERT Advisory CA-2001-11
• CERT Vulnerability Note VU#28934
• Symantec Rates Sadmind/IIS Worm a One In Severity - Risk Impact of Security Vulnerability Resulting From Worm Exploit Rated as High
• Solaris Worm Attacks IIS Servers

This malware-related article is a stub. You can help Wikipedia by adding missing information.

• v
• t
• e