From owner-freebsd-security Fri Aug 17 0:13: 0 2001 Delivered-To: freebsd-security@freebsd.org Received: from neptune.he.net (neptune.he.net [216.218.166.2]) by hub.freebsd.org (Postfix) with ESMTP id 7DD4137B40C for ; Fri, 17 Aug 2001 00:12:57 -0700 (PDT) (envelope-from robinson@netrinsics.com) Received: from netrinsics.com ([210.52.155.136] (may be forged)) by neptune.he.net (8.8.6/8.8.2) with ESMTP id AAA16710 for ; Fri, 17 Aug 2001 00:12:55 -0700 Received: (from robinson@localhost) by netrinsics.com (8.11.2/8.11.1) id f7H7DHF10706; Fri, 17 Aug 2001 15:13:17 +0800 (+0800) (envelope-from robinson) Date: Fri, 17 Aug 2001 15:13:16 +0800 From: Michael Robinson To: default - Subscriptions Cc: security@freebsd.org Subject: Re: Fw: Silly crackers... NT is for kids... - DOH! Message-ID: <20010817151316.A10647@elephant.netrinsics.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from default013subscriptions@hotmail.com on Fri, Aug 17, 2001 at 01:47:05AM -0500 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, Aug 17, 2001 at 01:47:05AM -0500, default - Subscriptions wrote: > As it turns out, I did a bit more research at http://www.eeye.com , and > found that this is the CODE RED worm! > Wow! This is one mean wormy, well... guess I can at least be relieved that > there aren't 5 billion crackers on my I.P. block :) Since you seem to be somewhat clue challenged, I thought it might be worthwhile to point out that a couple months ago a bug was discovered in the FreeBSD telnetd service that allows any random person on the Internet to walk in and get root access to your server. Just in case you have telnetd running and hadn't heard about this. There's a big notice at the top of http://www.freebsd.org to get you started. -Michael Robinson To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message