Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 13 Dec 2001 12:42:43 -0500
From:      "Brian F. Feldman" <green@FreeBSD.ORG>
To:        "Ronan Lucio" <ronan@melim.com.br>
Cc:        freebsd-security@FreeBSD.ORG, "Mr. Chan" <bacid@ottawa.com>
Subject:   Re: Question about port 50000 
Message-ID:  <200112131742.fBDHgho79388@green.bikeshed.org>
In-Reply-To: Message from "Ronan Lucio" <ronan@melim.com.br>  of "Thu, 13 Dec 2001 14:04:12 -0200." <058d01c183ef$ce77e1b0$2aa8a8c0@melim.com.br> 

next in thread | previous in thread | raw e-mail | index | archive | help
"Ronan Lucio" <ronan@melim.com.br> wrote:
> > Hey,
> >
> > I installed FBSD 4.4 a few days ago and noticed a weird port that is
> running..
> >
> > tcp4       0      0  *.50000                *.*                    LI=
STEN
> >
> > Now this is a brand new installation, so i doubt i got hacked/root
> kitted..
> >
> > When i telnet to it this is all i get:
> >
> >  > telnet localhost 50000
> > Trying 127.0.0.1...
> > Connected to localhost.cpu1058.adsl.bellglobal.com.
> > Escape character is '^]'.
> =

> It=B4s really weird,
> Openssh from FreeBSD-4.4 is vulnerable, do you have Openssh istalled?

No, OpenSSH is vulnerable if you for some reason had enabled UseLogin.  =

There's no reason to have done that...

-- =

 Brian Fundakowski Feldman           \  FreeBSD: The Power to Serve!  /
 green@FreeBSD.org                    `------------------------------'



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200112131742.fBDHgho79388>