Date: Sat, 20 Apr 1996 17:25:43 -0700 (PDT) From: Tom Samplonius <tom@uniserve.com> To: John-David Childs <jdc@ism.net> Cc: freebsd-questions@freebsd.org Subject: Re: uucpd: passwd read Undefined error 0 Message-ID: <Pine.BSF.3.91.960420172331.21138B-100000@haven.uniserve.com> In-Reply-To: <Pine.BSD/.3.91.960420123822.27081K-100000@optim.ism.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 20 Apr 1996, John-David Childs wrote: > I'm running 2.1.0-RELEASE on a remote machine and found the following > message this morning: > > /etc>grep uucp /var/log/messages > Apr 20 11:37:48 deimos uucpd[16164]: passwd read: Undefined error: 0 > Apr 20 11:53:55 deimos uucpd[16238]: passwd read: Undefined error: 0 > > Since I am not (yet) offering UUCP services on this particular box, I have > since disabled uucpd in /etc/inetd (stupid me, I forgot to check that > when I installed FreeBSD. However, I also noticed the following in my > /var/log/user.log > > Apr 20 11:38:11 <local ISP competitor> > Apr 20 11:38:14 <local ISP competitor> last message repeated 10 times > > /etc/syslog is set so that user.* goes to /var/log/user.log > > I am assuming that <local ISP competitor> tried to get some sort > of password list from my FreeBSD box (waste of time, really, since there > are no user files on it ;-). Any clues appreciated. No. uucpd is only prompting for a password. Try it yourself by "telnet localhost uucp" and see what happens. Probably your machine was port scanned by someone at the other host. Most often this is some wannabe hacker with his/her first shell account and copy of Satan. Tom
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.960420172331.21138B-100000>