Andy said:
If you run Debian and have not updated in the last 2-3
days then yes
you need to worry (and may already have been exploited).
Yep, I know someone who's been 'got' by this, so people clearly have
been actively looking for victims.
I've spent some time on my knees in front of Postfix, apologising for
the various rude things I said about it (they changed some defaults from
the version with Debian Sarge and didn't make that clear in their
documentation) when I installed it instead of Exim...
Ian