Mailinglist Archive: opensuse-security (64 mails)
| < Previous | Next > |
Re: [suse-security] Help: our system has been hacked...!
- From: Thomas Finteis <chefche@xxxxxxxxxxxx>
- Date: Tue, 27 Jul 1999 09:00:27 +0200
- Message-id: <379D590B.1F5DF0F9@xxxxxxxxxxxx>
Hi guys,
the imap and pop3 demons are well known to be vulnarable against stack
overflow exploits for more than one year. Even with the versions from
SuSE 5.3 it is childishly simple to gain root access from the internet
if you offer these services in /etc/inet.conf.
A very good patch against stack overflow exploits ist available at
http://www.false.com/security/linux/
Best regards
--
---------------------------------- UNIVERSITAS -
- Thomas Finteis _|\ /|_ -
- Institut fuer Experimentalphysik |||O O||| -
- Universitaet des Saarlandes ||| V ||| -
- Postfach 151150 ||| ||| -
- D-66041 Saarbruecken ||| ||| -
- Tel.: 0681/302-2247 |/|___|\| -
- Fax : 0681/302-2947 A A -
---------------------------------- SARAVIENSIS -
the imap and pop3 demons are well known to be vulnarable against stack
overflow exploits for more than one year. Even with the versions from
SuSE 5.3 it is childishly simple to gain root access from the internet
if you offer these services in /etc/inet.conf.
A very good patch against stack overflow exploits ist available at
http://www.false.com/security/linux/
Best regards
--
---------------------------------- UNIVERSITAS -
- Thomas Finteis _|\ /|_ -
- Institut fuer Experimentalphysik |||O O||| -
- Universitaet des Saarlandes ||| V ||| -
- Postfach 151150 ||| ||| -
- D-66041 Saarbruecken ||| ||| -
- Tel.: 0681/302-2247 |/|___|\| -
- Fax : 0681/302-2947 A A -
---------------------------------- SARAVIENSIS -
| < Previous | Next > |