From owner-freebsd-questions Wed Nov 10 20:53:34 1999 Delivered-To: freebsd-questions@freebsd.org Received: from earth.wnm.net (earth.wnm.net [208.246.240.243]) by hub.freebsd.org (Postfix) with ESMTP id 282C214DBA for ; Wed, 10 Nov 1999 20:53:31 -0800 (PST) (envelope-from alex@wnm.net) Received: from localhost (alex@localhost) by earth.wnm.net (8.8.8/8.8.8) with ESMTP id WAA09302; Wed, 10 Nov 1999 22:53:34 -0600 (CST) Date: Wed, 10 Nov 1999 22:53:33 -0600 (CST) From: Alex Charalabidis To: Shawn Ramsey Cc: questions@FreeBSD.ORG Subject: Re: f'ed up directory! In-Reply-To: <382A1EAD.47110945@megadeth.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, 10 Nov 1999, Shawn Ramsey wrote: > > from freebsd-security: > > > > ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-99:05.fts.asc > > > > -- and - > > > > >Actually, the problem is fts(3) being broken. Use my > > >little program for > > >this situation over at http://www.freebsd.org/~green/deltree.c > > > > > Thanks for the link. I was able to delete the directory with the > program. Anyone have an idea what they user may have done to create such > a mess? > They used a piece of sample exploit code posted to bugtraq by Przemyslaw Frasunek on 24.08.99, check the archives for that date. -ac -- ============================================================== Alex Charalabidis (AC8139) 5050 Poplar Ave, Ste 170 Systems Administrator Memphis, TN 38157 WebNet Memphis (901) 432 6000 ============================================================== To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message