The Patching Friars' AlmanacA calendar of CVE saints

Patron of November 2

Morris WormHoly card for morris-worm-fingerd-sendmail, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 Morris Worm VERMIS PRIMUS
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Morris, Church Father and First of the Worms

Patron of those who forget a stopping condition, the fingerd and sendmail daemons, and all the worms yet to come.

Life

On the night of 2 November 1988 a program written by Robert Tappan Morris, a student at Cornell, spread by itself across the machines of the Internet: it got in through an overflow in the fingerd daemon, the debug command left enabled in sendmail (CVE-1999-0095) and weak passwords. A propagation mistake made it replicate without end, paralysing thousands of computers. It was the first Internet worm, the case that gave birth to the CERTs; today we honour it as a Church Father, on All Souls' Day.

Prayer

O Saint Morris, first worm that could not stop, teach our programs when it is time to quit. On the day of the dead, deliver us from endless replication. Amen.

How to celebrate

Celebrated by disabling the sendmail debug command, checking buffer bounds and, in memoriam, writing at least one termination condition.

A worm with no brake devours the whole field.

Technical record

Disclosed on
November 2 1988
CVE
CVE-1999-0095

The debug command in Sendmail is enabled, allowing attackers to execute commands as root.

Sources: docs.lib.purdue.edu · en.wikipedia.org · sei.cmu.edu · nvd.nist.gov

📅 Add to your calendar

Saints:Google CalendarApple, Outlook and others (.ics)

Observances (feasts, scourges and miracles):Google CalendarApple, Outlook and others (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.