From owner-freebsd-security Tue Nov 13 10:59: 9 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail5.speakeasy.net (mail5.speakeasy.net [216.254.0.205]) by hub.freebsd.org (Postfix) with ESMTP id DFFE237B405 for ; Tue, 13 Nov 2001 10:59:03 -0800 (PST) Received: (qmail 8700 invoked from network); 13 Nov 2001 18:59:03 -0000 Received: from unknown (HELO laptop.baldwin.cx) ([64.81.54.73]) (envelope-sender ) by mail5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 13 Nov 2001 18:59:03 -0000 Message-ID: X-Mailer: XFMail 1.4.0 on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <5.1.0.14.2.20011114005803.0207ed70@MailServer> Date: Tue, 13 Nov 2001 10:59:02 -0800 (PST) From: John Baldwin To: Stefan Probst Subject: Re: Adore worm Cc: freebsd-security@FreeBSD.org, Rob Hurle , Axel Scheepers Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On 13-Nov-01 Stefan Probst wrote: > Thanks everybody for "encouraging" answers so far. > > I am in Vietnam, and the box is a dedicated server in the US :( > > There was nearly nothing installed, when I got it about two months ago, and > I installed several packages - all of them downloaded from the original > sites, in order to be sure to get the latest version. > > Will go to bed now and pray..... > I still can telnet to the box. > Maybe somebody finds an idea what to do... > Will see at my eMail tomorrow. > > Good Night! > Stefan Telnet is probably what killed you. There was a remote hole in telnet that allowed root access. -- John Baldwin <>< http://www.FreeBSD.org/~jhb/ "Power Users Use the Power to Serve!" - http://www.FreeBSD.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message