lkml.org 
[lkml]   [1997]   [Jan]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: [Offtopic] Russian Hacker
Date
> Statically is best. To prevent sh*t like this from happening, I've
> recompiled all my (similar) daemons statically....

Good now when you install security fix to your libc you can recompile the
lot each time.

> # > The first thing he/she/it did was downloading two files named:
> # > my_lib and my_library.so (attached).

Get a current netkit (NetKit9 by preference)

> # > NOW MY QUESTION IS HOW DID HE GET THE PASSWORD? Maybe with my_lib* ?
> # > May someone have a look at this files, please and mail me his comment?

Used the my_lib* and a bug in the old ld.so and telnetd to get a shell
run as root instead of the login binary

Alan


\
 
 \ /
  Last update: 2005-03-22 13:38    [W:0.058 / U:1.440 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site