Linux.Ramen.Worm

Linux.Ramen is a Linux worm that attacks machines running the Linux Red Hat 6.2 or 7.0 operating system. This worm does not execute on systems running Microsoft Windows. The worm attempts to use unpatched versions of rpc.statd, wuftpd, and LPRng.

Protection

• Initial Rapid Release version January 17, 2001
• Latest Rapid Release version March 25, 2008 revision 018
• Initial Daily Certified version January 17, 2001
• Latest Daily Certified version June 17, 2008 revision 017
• Initial Weekly Certified release date pending

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Medium
• Number of Infections: 50 - 999
• Number of Sites: More than 10
• Geographical Distribution: Medium
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Medium