Date: Wed, 17 Jan 2001 14:55:41 +1300 From: Jonathan Chen <jonc@itouch.co.nz> To: Jon Loeliger <jdl@jdl.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: rpc.statd weirdness? Message-ID: <20010117145541.A21642@itouchnz.itouch> In-Reply-To: <200101162328.RAA08648@chrome.jdl.com>; from jdl@jdl.com on Tue, Jan 16, 2001 at 05:28:42PM -0600 References: <200101162328.RAA08648@chrome.jdl.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jan 16, 2001 at 05:28:42PM -0600, Jon Loeliger wrote:
> Folks,
>
> Can anyone give me a hint as to what might be causing an odd
> message in my /var/log/messages file that looks like this:
>
> Jan 12 00:28:11 chrome rpc.statd: invalid hostname to sm_stat: ^Xw^??^
> Xw^??^Yw^??^Yw^??^Zw^??^Zw^??^[w^??^[w^??%8x%8x%8x%8x%8x%8x%8x%8x%8x%2
> 36x%n%137x%n%10x%n%192x%n^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P
>
> And there follows around 1000 ^P characters.
Looks like an hack attack attempt using portmapper by overflowing buffers.
--
Jonathan Chen <jonathan.chen@itouch.co.nz>
----------------------------------------------------------------------
"Nyuck, nyuck, nyuck" - Curly
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010117145541.A21642>