[29820] in North American Network Operators' Group
OT: Earthlink Contact - Important Root Hacked
daemon@ATHENA.MIT.EDU (K. Graham)
Fri Jul 7 15:45:13 2000
Message-ID: <39663384.B9F80D2E@ican.net>
Date: Fri, 07 Jul 2000 12:46:12 -0700
From: "K. Graham" <kgraham@ican.net>
MIME-Version: 1.0
To: nanog@merit.edu
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Errors-To: owner-nanog-outgoing@merit.edu
Sorry to bother you all but I am looking for a contact at Earthlink.
The IP is under Sprint Advanced Network Services, Altamonte Springs
Florida. We have called that contact and shuffled onto Earthlink. The
1-800# to their support line proofed futile. The traditional emails to
webmaster@ abuse@ etc have been sent and several phone calls have been
made to contact someone responsible to no avail.
We would like to contact someone who can remove the exploit that is on
one of their machines. It gives the user root access (no password
required) and allows you to remote copy an exploit to other machines.
Our efforts have lapsed over the past several days.
This exploit was used on us and we would like to remove any likelihood
of others being compromised. The exploit is in the hands of the people
at rootshell.
--
Kim Graham, CCNA
System Administrator, Client Services
