[20925] in North American Network Operators' Group
Re: Rootshell pages hacked
daemon@ATHENA.MIT.EDU (Adam D. McKenna)
Thu Oct 29 15:54:29 1998
From: "Adam D. McKenna" <adam@flounder.net>
To: "Joe Shaw" <jshaw@insync.net>, "JR Mayberry" <rick@magpage.com>
Cc: "neil" <neil@junior.uwc.ac.za>, "Russ Haynal" <russ@navigators.com>,
<nanog@merit.edu>
Date: Thu, 29 Oct 1998 14:38:44 -0500
They claim they were running only qmail, apache and ssh, but who knows if
that's true.
I have heard rumours about an ssh exploit but nothing concrete.
--Adam
-----Original Message-----
From: Joe Shaw <jshaw@insync.net>
To: JR Mayberry <rick@magpage.com>
Cc: neil <neil@junior.uwc.ac.za>; Russ Haynal <russ@navigators.com>;
nanog@merit.edu <nanog@merit.edu>
Date: Thursday, October 29, 1998 2:36 PM
Subject: Re: Rootshell pages hacked
I thought they were runnign qmail?
Joe
On Thu, 29 Oct 1998, JR Mayberry wrote:
> Supposedly sendmail 8.9.1 is to blame, not ssh.
> http://www.sendmail.com/sendmail.8.9.1a.html
