Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 08 Dec 1999 12:35:38 -0500
From:      Sean Michael Whipkey <highway@cstone.net>
To:        freebsd-chat <chat@freebsd.org>
Subject:   Re: Yahoo hacked last night
Message-ID:  <384E96EA.E9E0833C@cstone.net>
References:  <Pine.BSF.4.02A.9912081638110.37369-100000@dogma.freebsd-uk.eu.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Jonathon McKitrick wrote:
> Question: if a site like yahoo has telnet disabled (thus disabling running
> commands directly) how could someone gain control of the system or access
> to privileged information?

There are lots of ways to compromise a system without needing telnet.

Buffer overflows in various programs will allow arbitrary commands to be
run; some holes in FTP programs, etc., will allow you to FTP as a root
user.

Any system on the Internet is vulnerable...it's just a question of *how*
vulnerable. :)

SeanMike

--
SeanMike Whipkey - highway@cstone.net - http://www.cstone.net
Engineering Department, Cornerstone Networks, Inc. - 804.817.7000
HEY! Lay off the SeanMike! The man's a misunderstood visionary!
 - Kermit Labmonkey (aka Ryan Kimmet)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-chat" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?384E96EA.E9E0833C>