lkml.org 
[lkml]   [1997]   [Jan]   [3]   [last100]   RSS Feed
Views: [more markup]  [less markup]  [headers]  [forward] 
 
Messages in this thread
/
From(Alan Cox)
SubjectRe: [Offtopic] Russian Hacker
DateFri, 3 Jan 1997 20:41:36 +0000 (GMT)
> Statically is best. To prevent sh*t like this from happening, I've
> recompiled all my (similar) daemons statically....

Good now when you install security fix to your libc you can recompile the
lot each time. 

>  # > The first thing he/she/it did was downloading two files named:
>  # > my_lib and my_library.so (attached). 

Get a current netkit (NetKit9 by preference)

>  # > NOW MY QUESTION IS HOW DID HE GET THE PASSWORD? Maybe with my_lib* ?
>  # > May someone have a look at this files, please and mail me his comment?

Used the my_lib* and a bug in the old ld.so and telnetd to get a shell
run as root instead of the login binary

Alan


\
 
 \ /
  Last update: 2005-03-22 12:38    [from the cache]
©2003-2008