Robert P. Goldman wrote: > I believe I just saw something about this in the SANS NewsBites. Here > you go: > > http://www.incidents.org/diary/diary.php?id=152 > <snip> It's been updated... seems there's a worm: http://www.incidents.org/diary/diary.php?id=156 -carlos