Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Feb 1997 17:17:22 -0500 (EST)
From:      Andrew Y Ng <ayn@Ngbert.org>
To:        Cliff Addy <fbsdlist@revelstone.jvm.com>
Cc:        questions@freebsd.org
Subject:   Re: Attack of the sendmail zombies
Message-ID:  <Pine.NEB.3.95q.970212171626.21032C-100000@andrew.Ngbert.org>
In-Reply-To: <Pine.BSF.3.91.970212155611.28528B-100000@revelstone.jvm.com>

next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----

On Wed, 12 Feb 1997, Cliff Addy wrote:

> Suddenly, I've got hundreds of sendmail processes in a zombie state on my 
> system.  What could be causing this?

well, the old sendmail has a security hole, smtp processes got run by
root and ppl can easily write a script the start an smtp process and
get a root shell that way...

an upgrade would be wise :)


/ayn

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMwJBcJ6qvWJYgw1hAQGFWQP/b2K9u3SgoUUuOfLm2Is5TI6jmtRTRD4z
QVr9XJMqPPYHyngds3ASOx7sSVyMCAw/98+Js/MTHVgeUsmO6acqSnMCZDcLvpqD
26M3AzYJh9gBdiOdpfiZNOrK3B5e26R3nGhNv9YOcZ6JQ653Rs8mOkGh1is5LxHR
9OvsTPKY+0I=
=umHX
-----END PGP SIGNATURE-----

--
Andrew Y Ng <ayn@CMU.EDU> | Carnegie Mellon University
http://andrew.Ngbert.org  | ECE major  // 4-yr BS/MS
campus ph: 412/862-2836   | voice mail: 412/268-6700 x30027
                          | talk: finger ayn@andrew.Ngbert.org
   * NGBERT.ORG! *        |       for online status
http://www.Ngbert.org     | finger ayn@CMU.EDU for more info...
--------------------------X------------------------------------- 
   NetBSD   NeXT   FreeBSD    Linux  Be   Solaris   !windoze

All the world's a VAX,
And all the coders merely butchers;
They have their exits and their entrails;
And one int in his time plays many widths,
His sizeof being _N bytes.  At first the infant,
Mewling and puking in the Regent's arms.
And then the whining schoolboy, with his Sun,
And shining morning face, creeping like slug
Unwillingly to school.
		-- A Very Annoyed PDP-11




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.95q.970212171626.21032C-100000>