Re: Gaining root from (null/0)

[ABrady <kcsmart kc rr com>]

On Sun, 09 Sep 2001 11:49:55 +0800 Lim Siew Cheng
<koshy mbox3 singnet com sg> imparted to us:

> 
> I need to find that out (btw, this is from a friend of mine, using
> RH7.1)
> Accordingly to him (ie.) he's already using the latest ver of wu-ftpd
> 
> Is it true that telnetd is vulnerable?
> I've read from somewhere to switch telnetd and to use ssh if possible?
> 
> So, is this a problem with telnetd or ftpd?

Both telnet and wu-ftpd are vulnerable to attacks. They fix wu-ftpd
sometimes and it gets broken again. I'm not even sure if anybody is
trying to work telnet. Just don't use it except in circumstances where
it can't be hacked, like between machines that are connected to each
other and nothing else in the world. Or if you have a machine that you
don't care if somebody trashes, it would be OK to use it there, too.

There are alternatives. Using ssh instead of telnet is the best, so far.
The ftp stuff can be handled by many others. I use pure-ftpd because my
needs are simple. There are better, there are more complicated, there
are worse, there are less complicated (not by much). But most are more
secure.
 
> At 05:15 PM 09/07/2001 -0300, you wrote:
> >At 9/7/2001 01:36 PM +0800, you wrote:
> >>Could anyone tell me what's with the following?
> >>Ive been informed that wu-ftpd is in use and it's already patched
> >
> >You've been clearly hacked, as others have already mentioned. What
> version 
> >of wu-ftpd are you running, and what patch is it that you have
> applied?
> >
> >
> >--
> >Rodolfo J. Paiz
> >rpaiz indahaus com
> >
> >
> >
> >_______________________________________________
> >Redhat-list mailing list
> >Redhat-list redhat com
> >https://listman.redhat.com/mailman/listinfo/redhat-list
> 
> 
> 
> 
> _______________________________________________
> Redhat-list mailing list
> Redhat-list redhat com
> https://listman.redhat.com/mailman/listinfo/redhat-list


-- 
Five days a week my body is a temple. The other two, it's an amusement
park.