From owner-freebsd-security Thu Nov 30 11: 7:20 2000 Delivered-To: freebsd-security@freebsd.org Received: from citusc17.usc.edu (citusc17.usc.edu [128.125.38.177]) by hub.freebsd.org (Postfix) with ESMTP id CB7A837B400 for ; Thu, 30 Nov 2000 11:07:17 -0800 (PST) Received: (from kris@localhost) by citusc17.usc.edu (8.11.1/8.11.1) id eAUJ7fS29702; Thu, 30 Nov 2000 11:07:41 -0800 (PST) (envelope-from kris) Date: Thu, 30 Nov 2000 11:07:41 -0800 From: Kris Kennaway To: The Hermit Hacker Cc: Stefano Riva , security@FreeBSD.ORG Subject: Re: FreeBSD hacked? Message-ID: <20001130110741.B29627@citusc17.usc.edu> References: <20001128215508.A94876@citusc17.usc.edu> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="nVMJ2NtxeReIH9PS" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from scrappy@hub.org on Thu, Nov 30, 2000 at 01:50:26PM -0400 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org --nVMJ2NtxeReIH9PS Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Nov 30, 2000 at 01:50:26PM -0400, The Hermit Hacker wrote: > > > >Yes, I can confirm this happened last night. We were immediately > > > >informed by those who did it including how it was achieved. The > > > >penetration mechanism was not a vulnerability in FreeBSD and was ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > > >corrected immediately. > > >=20 > > > Could you give us some detail about the mechanism used? > >=20 > > Not at this time. I'll release more details in a few days once we've > > had time to look things over better. >=20 > so, for the next few days, there is a possibility that the rest of us are > as vulnerable? *raised eyebrow* Only if you think I'm a damned liar ;-) Kris --nVMJ2NtxeReIH9PS Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iEYEARECAAYFAjompXwACgkQWry0BWjoQKXW5wCgnhLOobs3d0jUKPMRqIdLX7te Ey8An1WPUdFztzqJzROn3IyIjIwVAnqW =sYiN -----END PGP SIGNATURE----- --nVMJ2NtxeReIH9PS-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message