From: "Rev. Mark Rogaski" <wendigo@gti.net>
Date: Fri, 24 May 1996 16:08:54 +0800
To: mrm@netcom.com (Marianne Mueller)
Subject: Re: VIRUS ALERT: Java virus that affects Netscape 2.0 & 2.01.
In-Reply-To: <199605240129.SAA00250@netcom20.netcom.com>
Message-ID: <199605240431.AAA28575@apollo.gti.net>
MIME-Version: 1.0
Content-Type: text


-----BEGIN PGP SIGNED MESSAGE-----

An entity claiming to be Marianne Mueller wrote:
: 
: We've reached urban legend time for Java...?   
: 
: There is no Java virus known as "Black Widow".  There was a melodramatic
: web article about Java security that used the title "Black Widow", a pun
: on the web.  The article focused mostly on the danger of denial-of-service

"Black Widow" was the calling card of a little script called 'latro' that
exploited the stupidity of certain webmasters who put perl.exe in the
cgi-bin directory on PC-based webservers.  The default code to execute
on the remote machine was:


print "If I were nasty, you'd be spiderfood by now.\n";

print "\n\n\t--the black widow\n";


- -- 
    Mark Rogaski   | Why read when you can just sit and |      Member
  GTI System Admin |         stare at things?           | Programmers Local
  wendigo@gti.net  | Any expressed opinions are my own  |     # 0xfffe
 wendigo@pobox.com | unless they can get me in trouble. |     APL-CPIO


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMaU7oA0HmAyu61cJAQGxHQP+OkDD+v4FhAQynhI4V2GpwilaOEoxlow0
Y5s1g8YkIYuApvxAU8eyFfqmlp8fG1rnc4mITXmvYGj66Wy5L/n2npfXTo45KAHc
VRr7qT7HeEFwgunMCnJcZ+7CtlAKpXn6siuenUEl4gqRjApmFI/pLSXna4sbG4v8
1tNAcyOITmk=
=McGt
-----END PGP SIGNATURE-----