[95140] in RedHat Linux List
Re: port 111
daemon@ATHENA.MIT.EDU (dreamwvr)
Thu Oct 15 12:42:37 1998
Date: Thu, 15 Oct 1998 10:45:31 -0600
To: redhat-list@redhat.com, redhat-list@redhat.com
From: dreamwvr <dreamwvr@dreamwvr.com>
In-Reply-To: <199810151224.IAA11193@bomi.uqtr.uquebec.ca>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
hi papi,
nfs is full of holes... but there is a secure nfs and rpc but i have
never built it on redhat. Let me know if your interested i will see if i
can dig up the url.
Regards,
dreamwvr@dreamwvr.com
At 08:24 AM 10/15/98 -0400, Emmanuel Papirakis wrote:
>Hey,
>
> one of my friends got hacked throw port 111. This port was opened because
of his nfs daemon. The problem is that the program /bin/login has been
replaced by some sort of fake. Also, finger and who don't show any users,
no matter how many virtual consols we are logged on.
>
> I think this guy has installed some kind of root-kit on his machine. Does
anyone know of such root-kit, how they work, how to fix the damage and how
to prevent being hacked throw that port?
>
> Will stopping nfs daemon do the trick? ANd, what if you want to do some
nfs, is there a safe way?
>
>
> Papi
>
>
>--
> PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
> http://www.redhat.com http://archive.redhat.com
> To unsubscribe: mail redhat-list-request@redhat.com with
> "unsubscribe" as the Subject.
>
>
Reuters, London, February 29, 1998:
Scientists have announced discovering a meteorite which will strike the
earth in March, 2028. Millions of UNIX coders expressed relief for being
spared the UNIX epoch "crisis" of 2038.
_______________________________________________________________________
DREAMWVR.COM - TOTAL WEB INTEGRATION, DEVELOPMENT, DESIGN SERVICES.
Featuring Website Development and Web Strategies of a TOP Developer
<http://www.dreamwvr.com/dynamicduo.html> <mailto:dreamwvr@dreamwvr.com>
"As Unique as the Company You Keep." "===0 PGP Key Available
________________________________________________________________________
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com http://archive.redhat.com
To unsubscribe: mail redhat-list-request@redhat.com with
"unsubscribe" as the Subject.
