From owner-freebsd-current  Sat Oct 24 01:57:33 1998
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id BAA26614
          for freebsd-current-outgoing; Sat, 24 Oct 1998 01:57:33 -0700 (PDT)
          (envelope-from owner-freebsd-current@FreeBSD.ORG)
Received: from gatekeeper.tsc.tdk.com (gatekeeper.tsc.tdk.com [207.113.159.21])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id BAA26609
          for <current@FreeBSD.ORG>; Sat, 24 Oct 1998 01:57:32 -0700 (PDT)
          (envelope-from gdonl@tsc.tdk.com)
Received: from sunrise.gv.tsc.tdk.com (root@sunrise.gv.tsc.tdk.com [192.168.241.191])
	by gatekeeper.tsc.tdk.com (8.8.8/8.8.8) with ESMTP id BAA24215;
	Sat, 24 Oct 1998 01:56:55 -0700 (PDT)
	(envelope-from gdonl@tsc.tdk.com)
Received: from salsa.gv.tsc.tdk.com (salsa.gv.tsc.tdk.com [192.168.241.194])
	by sunrise.gv.tsc.tdk.com (8.8.5/8.8.5) with ESMTP id BAA14383;
	Sat, 24 Oct 1998 01:56:54 -0700 (PDT)
Received: (from gdonl@localhost)
	by salsa.gv.tsc.tdk.com (8.8.5/8.8.5) id BAA23322;
	Sat, 24 Oct 1998 01:56:53 -0700 (PDT)
From: Don Lewis <Don.Lewis@tsc.tdk.com>
Message-Id: <199810240856.BAA23322@salsa.gv.tsc.tdk.com>
Date: Sat, 24 Oct 1998 01:56:53 -0700
In-Reply-To: Kris Kennaway <kkennawa@physics.adelaide.edu.au>
       "Re: nestea v2 against freebsd 3.0-Release (fwd)" (Oct 24,  6:14pm)
X-Mailer: Mail User's Shell (7.2.6 alpha(3) 7/19/95)
To: Kris Kennaway <kkennawa@physics.adelaide.edu.au>,
        Don Lewis <Don.Lewis@tsc.tdk.com>
Subject: Re: nestea v2 against freebsd 3.0-Release (fwd)
Cc: current@FreeBSD.ORG
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Oct 24,  6:14pm, Kris Kennaway wrote:
} Subject: Re: nestea v2 against freebsd 3.0-Release (fwd)

} rootshell.com has a .tgz containing a linux compiled binary - that's the one I
} ran [1]. Perhaps it was the linuxulator which crashed me, instead of what the
} program itself did.

Could be.  Can you get a stack trace, either with DDB, or with a crash dump
and gdb?

} [1] This might not have been so bright :-)

Hmn, yes.  Running binaries of unknown origin as root.  I wonder what
backdoors it installed ...

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message