Date: Wed, 20 Sep 2000 19:39:53 -0700 From: Kent Stewart <kstewart@urx.com> To: Kris Kennaway <kris@FreeBSD.ORG> Cc: Brandon Fosdick <bfoz@glue.umd.edu>, stable@FreeBSD.ORG Subject: Re: Odd log entries...an attempted breakin? Message-ID: <39C974F9.210D0F41@urx.com> References: <39C8C50C.CA929D8C@glue.umd.edu> <20000920180446.B81946@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Kris Kennaway wrote: > > On Wed, Sep 20, 2000 at 10:09:16AM -0400, Brandon Fosdick wrote: > > For the last week or so I've been seeing the following entries in > > /var/log/messages: > > > > Sep 17 01:17:11 nbf-27 rpc.statd: Invalid hostname to sm_mon: > > ^D÷ÿ¿^D÷ÿ¿^E÷ÿ¿^E÷ÿ¿^F÷ÿ¿^F÷ÿ¿^G÷ÿ¿^G÷ÿ¿%08x %08x %08x %08x %08x %08x > > %08x %08x > > Someone is trying to exploit a root hole in the Linux rpc.statd. > ou don't have anything to worry about running FreeBSD here :-) Is that what the Tribal Flood people are doing or is this something different? Kent > > However, firewalling is always a good idea. > > Kris > > -- > In God we Trust -- all others must submit an X.509 certificate. > -- Charles Forsythe <forsythe@alum.mit.edu> > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message -- Kent Stewart Richland, WA mailto:kbstew99@hotmail.com http://kstewart.urx.com/kstewart/index.html FreeBSD News http://daily.daemonnews.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?39C974F9.210D0F41>