LovGate and UNIX

tripwire45 · May 19, 2004

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

This is more to point out that Windows isn't the only OS that gets attacked. I'm posting this as a copy-and-paste from an HP site:

Finding love(Gate) in the strangest places UNIX!

Let me introduce you to Scott Garee. Some of you may know Scott, an ITO Consultant with HP Managed Services in Richardson Texas, who encountered loves distant, evil cousin LovGate.G this past spring. But more about that in a moment.

Among his many responsibilities as an ITO Consultant, Scott manages a UNIX server that archives various firmware resources used by software developers for the HP Superdome platform. This means Scott must consistently provide a secure collaboration environment for developers who support HPs most robust high-end server. That would be Superdome, a powerful platform ideal for running all sorts of mission-critical applications. And one of the UNIX value-adds is that there are relatively few viruses written for this enterprise-class operating system. Thats because the bad guys develop virtually all of their witchs brew for Windows, since it is the most widely used operating system.

So imagine Scotts surprise when he installed a Beta version of the Sophos Anti-Virus software on his UNIX server, only to discover that the archives had been infested with the noxious, Windows-based LovGate.G worm. Sophos Anti-Virus also uncovered an obscure but potentially disruptive vulnerability in the machines configuration that allowed guest PCs to logon to the HP network without proper authentication. After performing a root-cause analysis, Scott was able to use his antivirus tools to isolate the virus and prevent it from spreading. He was also able to identify the errant PC that had contaminated the archive in the first place.

So what does all this prove? That love(gate) is where you find it, sometimes even embedded in the seemingly safest of places, an HP UNIX server. This lesson is also instructive for anyone who thinks that there is such a thing as a virus-free environment. So hats off to Scott Garee and Chris Olson, a member of the Information Security team who provided Scott with the Sophos software. Also worthy of a high-five is HPs defense in depth strategy for virus protection. You all deserve a victory lap before the assembled masses. Congratulations, team!
Click to expand...

Apparently Sophos is an anti-virus software that runs natively on UNIX and Linux. FYI.

AJ · May 19, 2004

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

We use Sophos at work trip. Not bad Antivirus. I think that we are paying something in the region of £5000 for a 3 year site licence which includes staff laptops and pc's at home. Check out their Web Site for more details.

Oh yes, we also run it on our mail server (Red Hat)

Log in or Sign up

LovGate and UNIX

tripwire45 Zettabyte Poster

AJ 01000001 01100100 01101101 01101001 01101110 Administrator

Share This Page

Navigation

Popular Forums

Useful Links

Log in or Sign up

LovGate and UNIX

tripwire45 Zettabyte Poster

AJ 01000001 01100100 01101101 01101001 01101110 Administrator

Share This Page

Useful Searches