From owner-freebsd-security Sat Apr 20 11:53:51 1996 Return-Path: owner-security Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id LAA23365 for security-outgoing; Sat, 20 Apr 1996 11:53:51 -0700 (PDT) Received: from optim.ism.net (optim.ism.net [205.199.12.2]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id LAA23359 Sat, 20 Apr 1996 11:53:48 -0700 (PDT) Received: from optim.ism.net (jdc@optim.ism.net [205.199.12.2]) by optim.ism.net (8.6.12/8.6.12) with SMTP id NAA28806; Sat, 20 Apr 1996 13:01:53 -0600 Date: Sat, 20 Apr 1996 13:01:52 -0600 (MDT) From: John-David Childs To: freebsd-questions@freebsd.org cc: freebsd-security@freebsd.org Subject: uucpd: passwd read Undefined error 0 Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk I'm running 2.1.0-RELEASE on a remote machine and found the following message this morning: /etc>grep uucp /var/log/messages Apr 20 11:37:48 deimos uucpd[16164]: passwd read: Undefined error: 0 Apr 20 11:53:55 deimos uucpd[16238]: passwd read: Undefined error: 0 Since I am not (yet) offering UUCP services on this particular box, I have since disabled uucpd in /etc/inetd (stupid me, I forgot to check that when I installed FreeBSD. However, I also noticed the following in my /var/log/user.log Apr 20 11:38:11 Apr 20 11:38:14 last message repeated 10 times /etc/syslog is set so that user.* goes to /var/log/user.log I am assuming that tried to get some sort of password list from my FreeBSD box (waste of time, really, since there are no user files on it ;-). Any clues appreciated. -- John-David Childs www.marsweb.com/www.ism.net System Administrator Internet Services Montana (406)721-6277 & Network Engineer M@RSWeb - Montana's PREMIER Web Site "I used up all my sick days...so I'm calling in dead"