From owner-freebsd-stable Fri Jul 20 14: 3:54 2001 Delivered-To: freebsd-stable@freebsd.org Received: from freeway.dcfinc.com (cx74889-a.phnx3.az.home.com [24.1.193.157]) by hub.freebsd.org (Postfix) with ESMTP id 7648837B403 for ; Fri, 20 Jul 2001 14:03:46 -0700 (PDT) (envelope-from chad@freeway.dcfinc.com) Received: (from chad@localhost) by freeway.dcfinc.com (8.8.8/8.8.8) id OAA12915; Fri, 20 Jul 2001 14:03:31 -0700 (MST) (envelope-from chad) Date: Fri, 20 Jul 2001 14:03:31 -0700 From: "Chad R. Larson" To: Chris Faulhaber , "Chad R. Larson" , Tom , admin@kremilek.gyrec.cz, freebsd-stable@FreeBSD.ORG Subject: Re: probably remote exploit Message-ID: <20010720140331.A12903@freeway.dcfinc.com> References: <20010720111551.A12442@freeway.dcfinc.com> <20010720141820.C47930@peitho.fxp.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010720141820.C47930@peitho.fxp.org>; from jedgar@fxp.org on Fri, Jul 20, 2001 at 02:18:20PM -0400 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Fri, Jul 20, 2001 at 02:18:20PM -0400, Chris Faulhaber wrote: > On Fri, Jul 20, 2001 at 11:15:51AM -0700, Chad R. Larson wrote: >> On Fri, Jul 20, 2001 at 09:24:20AM -0700, Tom wrote: >>> There are known problems wiht ntpd, which you seem to be using. There >>> is also a local exploit in 4.3-RELEASE. You should be on the >>> freebsd-security mailing list, and you should be checking the archives >>> of that list first. >> >> Also, to be sure no one installed any backdoors, you might want to >> do a CVSup/buildworld/installworld cycle. >> > > unless, of course, they trojaned the build tools :/ a full reinstall > is the best bet. Yes, but the CVSup will notice if any of the sources don't match the repository, and the subsequent buildworld will regenerate all the binaries. -crl -- Chad R. Larson (CRL15) 602-953-1392 Brother, can you paradigm? chad@dcfinc.com chad@larsons.org larson1@home.com DCF, Inc. - 14623 North 49th Place, Scottsdale, Arizona 85254-2207 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message