Messages in this thread |  | | From | (Alan Cox) | Subject | Re: [Offtopic] Russian Hacker | Date | Fri, 3 Jan 1997 20:41:36 +0000 (GMT) |
| |
> Statically is best. To prevent sh*t like this from happening, I've > recompiled all my (similar) daemons statically....
Good now when you install security fix to your libc you can recompile the lot each time.
> # > The first thing he/she/it did was downloading two files named: > # > my_lib and my_library.so (attached).
Get a current netkit (NetKit9 by preference)
> # > NOW MY QUESTION IS HOW DID HE GET THE PASSWORD? Maybe with my_lib* ? > # > May someone have a look at this files, please and mail me his comment?
Used the my_lib* and a bug in the old ld.so and telnetd to get a shell run as root instead of the login binary
Alan
|  |