Date: Thu, 01 Aug 2002 20:19:52 +0900 From: Shunichi Konno <konno@hal.rcast.u-tokyo.ac.jp> To: freebsd-security@FreeBSD.ORG Subject: Re: openssh-3.4p1.tar.gz trojaned Message-ID: <20020801201132.98EF.KONNO@hal.rcast.u-tokyo.ac.jp> In-Reply-To: <U73JDVU9YX4WC09FDMIQMUR05DBLI.3d4913b2@gonzo> References: <Pine.GSO.4.32.0208011214400.26397-100000@nippur.irb.hr> <U73JDVU9YX4WC09FDMIQMUR05DBLI.3d4913b2@gonzo>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello. Thank you for your comment, but there was no such a problem. :) I checked it trojaned or not after I extracted openssh-3.4.tgz. And I know too, that "bf-test.out" which is the shell script made by bf-test.c, will change Makefile and Makefile.in, and remove bftest* like this: grep -v -i bf-test Makefile.in > m.out ; cp m.out Makefile.in ; rm -f m.out grep -v -i bf-test Makefile > m.out ; cp m.out Makefile ; rm -f m.out rm -f bf-test* On Thu, 01 Aug 2002 12:55:46 +0200 Christoph Wegener <cwe@bph.ruhr-uni-bochum.de> wrote: CW> but be careful: you have to check it with the original tgz-file, cause the shellscript removes its existence itself from the archive once you CW> have installed. So taking your tree and making a tgz is NO solution to test... ---------- KONNO Shunichi <konno@hal.rcast.u-tokyo.ac.jp> To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020801201132.98EF.KONNO>