From owner-freebsd-questions Thu Mar 29 23:55:44 2001 Delivered-To: freebsd-questions@freebsd.org Received: from bazooka.unixfreak.org (bazooka.unixfreak.org [63.198.170.138]) by hub.freebsd.org (Postfix) with ESMTP id 1647737B71C for ; Thu, 29 Mar 2001 23:55:42 -0800 (PST) (envelope-from dima@unixfreak.org) Received: from spike.unixfreak.org (spike [63.198.170.139]) by bazooka.unixfreak.org (Postfix) with ESMTP id C3FD53E09; Thu, 29 Mar 2001 23:55:41 -0800 (PST) To: Kris Kennaway Cc: Edwin Groothuis , Bart Silverstrim , freebsd-questions@FreeBSD.ORG Subject: Re: named core dump In-Reply-To: <20010329121905.E5300@xor.obsecurity.org>; from kris@obsecurity.org on "Thu, 29 Mar 2001 12:19:05 -0800" Date: Thu, 29 Mar 2001 23:55:41 -0800 From: Dima Dorfman Message-Id: <20010330075541.C3FD53E09@bazooka.unixfreak.org> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Kris Kennaway writes: > On Thu, Mar 29, 2001 at 07:07:58PM +0200, Edwin Groothuis wrote: > > On Thu, Mar 29, 2001 at 11:57:50AM -0500, Bart Silverstrim wrote: > > > [ named dumps core ] > > > > Somebody is trying to get into your machine, upgrade to 8.2.3. See also > > ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:18.bind.asc > > And if they weren't fools, they already got root access.. Okay, I've seen enough of these e-mails to want to do something about it. Normally, I'd write up an FAQ entry about it, but that doesn't seem quite right in this case since it's so time-sensitive; i.e., after a while nobody will ask this stuff (hopefully). Anyone have any suggestions on a course of action? I'd like to document this somewhere we can point people at, but the FAQ doesn't seem the right place for it. Besides, if someone doesn't read the advisories, they probably don't read the FAQ, either, so all it'd be is an RTFM pointer (yes, we already have the advisory, but I think something that answers this "code dump" question directly is in order). Suggestions? Thanks, Dima Dorfman dima@unixfreak.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message