Date: Tue, 16 Jan 2001 19:43:21 -0500 (EST) From: billt <billt@what.ifelse.org> To: Jon Loeliger <jdl@jdl.com> Cc: <freebsd-questions@FreeBSD.ORG> Subject: Re: rpc.statd weirdness? Message-ID: <Pine.BSF.4.31.0101161932290.941-100000@zaius.poa> In-Reply-To: <200101162328.RAA08648@chrome.jdl.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 16 Jan 2001, Jon Loeliger wrote: > Folks, > > Can anyone give me a hint as to what might be causing an odd > message in my /var/log/messages file that looks like this: > > Jan 12 00:28:11 chrome rpc.statd: invalid hostname to sm_stat: ^Xw^??^ > Xw^??^Yw^??^Yw^??^Zw^??^Zw^??^[w^??^[w^??%8x%8x%8x%8x%8x%8x%8x%8x%8x%2 > 36x%n%137x%n%10x%n%192x%n^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P > > And there follows around 1000 ^P characters. Could be that someone is trying to break in using a linux rpc.statd exploit. Check out: <http://www.cert.org/advisories/CA-2000-17.html>; To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.31.0101161932290.941-100000>