Date: Thu, 3 Jun 1999 18:52:04 +0300 From: Ruslan Ermilov <ru@ucb.crimea.ua> To: Marco Masotti <masotti@tiscalinet.it> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Popper unknown command (FreeBSD 2.1.6) Message-ID: <19990603185204.A14106@relay.ucb.crimea.ua> In-Reply-To: <37569A8B.E3A735BD@tiscalinet.it>; from Marco Masotti on Thu, Jun 03, 1999 at 05:08:59PM %2B0200 References: <37569A8B.E3A735BD@tiscalinet.it>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jun 03, 1999 at 05:08:59PM +0200, Marco Masotti wrote: > > Hello. > I'm reviewing the log files accumulated on a bastion host > (FreeBSD 2.1.6-stable) and I've seen several messages in this pattern: > I think is the attempt of exploiting a breach in the popper program, but > I cannot realize which kind of attempt is that and whether it succeded > or not. > I'm 100% sure you've been hacked. I'm attaching you an exloit code (in private) so you could test it yourself. -- Ruslan Ermilov Sysadmin and DBA of the ru@ucb.crimea.ua United Commercial Bank +380.652.247.647 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990603185204.A14106>