From owner-freebsd-isp Mon Nov 26 18: 3: 3 2001 Delivered-To: freebsd-isp@freebsd.org Received: from hex.databits.net (hex.databits.net [207.29.192.16]) by hub.freebsd.org (Postfix) with SMTP id 6BC0437B419 for ; Mon, 26 Nov 2001 18:03:01 -0800 (PST) Received: (qmail 15162 invoked by uid 1001); 27 Nov 2001 02:02:55 -0000 Date: Mon, 26 Nov 2001 21:02:55 -0500 From: Pete Fritchman To: Blake Swensen Cc: freebsd-isp@freebsd.org Subject: Re: Whaaa? /var/log/messages weirdness? Message-ID: <20011126210255.A14739@databits.net> References: <3C02F13D.AA1D7ABC@pyramus.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <3C02F13D.AA1D7ABC@pyramus.com>; from blake@pyramus.com on Mon, Nov 26, 2001 at 05:49:49PM -0800 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org ++ 26/11/01 17:49 -0800 - Blake Swensen: | This appeared in /var/log/messages on one of my machines.... anyone seen | this before? | [ snip linux rpc.statd exploit attempt ] Please search the archives before posting. This is covered a lot.. this is an attempt to exploit a Linux rpc.statd bug; your FreeBSD machine is not vulnerable. -pete -- Pete Fritchman [petef@(databits.net|freebsd.org|csh.rit.edu)] finger petef@databits.net for PGP key To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message