Date: 09 Oct 2002 13:16:30 -0400 From: Nigel Houghton <nigel@nfr.com> To: Mike Tancsa <mike@sentex.net> Cc: freebsd-security@FreeBSD.ORG Subject: Re: Sendmail trojan...? Message-ID: <1034183794.249.54.camel@dawgbsd> In-Reply-To: <5.1.1.6.0.20021009125538.04748c18@marble.sentex.ca> References: <20021009142546.GA27227@darkstar.doublethink.cx> <3DA3AE76.1070006@deevil.homeunix.org> <20021009142546.GA27227@darkstar.doublethink.cx> <5.1.1.6.0.20021009125538.04748c18@marble.sentex.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
--=-/WYWXRNbIJV4Q/G+ldSK Content-Type: text/plain Content-Transfer-Encoding: quoted-printable There are a myriad of possibilities, the only folks who can tell you are those who are responsible for the box in question. On Wed, 2002-10-09 at 13:00, Mike Tancsa wrote: >=20 > Hi, > Do you know the method they used to get in ? OpenSSL/https then=20 > local root exploit ? Although netcraft says > Apache/1.3.26 (Unix) mod_ssl/2.8.10 OpenSSL/0.9.6e on FreeBSD >=20 >=20 >=20 > ---Mike >=20 > At 08:03 AM 09/10/2002 -0700, Claus Assmann wrote: > >On Wed, Oct 09, 2002, Chris Faulhaber wrote: > > > > > Yes, the source in the tree has been verified against the > > > signed tarball; plus, it was the configure script that was > > > backdoored which buildworld does not use. > > > >It was not the configure script. I'm wondering who came up with > >this rumor; please stop spreading it. >=20 >=20 > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message --=20 --------------------------------------- Nigel Houghton NFR Security Inc. Webmaster http://www.nfr.com/ There cannot be a crisis next week. My schedule is already full. --Henry Kissinger=20 --=-/WYWXRNbIJV4Q/G+ldSK Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (FreeBSD) iD8DBQA9pGRts9X0TSPbQvERAszXAJwK7pR/kkuYuhndCVHgtf9OYxfO3ACgrKYu mXvzBgs58VH7O6lwOoTNz58= =abqo -----END PGP SIGNATURE----- --=-/WYWXRNbIJV4Q/G+ldSK-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1034183794.249.54.camel>