From owner-freebsd-security Thu Aug 1 4:19:57 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 070EE37B400 for ; Thu, 1 Aug 2002 04:19:55 -0700 (PDT) Received: from earth.hal.rcast.u-tokyo.ac.jp (earth.hal.rcast.u-tokyo.ac.jp [157.82.80.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3101643E70 for ; Thu, 1 Aug 2002 04:19:54 -0700 (PDT) (envelope-from konno@hal.rcast.u-tokyo.ac.jp) Received: from [192.168.80.236] (sun [157.82.80.16]) by earth.hal.rcast.u-tokyo.ac.jp (8.9.3/3.7W) with ESMTP id UAA07043; Thu, 1 Aug 2002 20:19:53 +0900 (JST) Date: Thu, 01 Aug 2002 20:19:52 +0900 From: Shunichi Konno To: freebsd-security@FreeBSD.ORG Subject: Re: openssh-3.4p1.tar.gz trojaned In-Reply-To: References: Message-Id: <20020801201132.98EF.KONNO@hal.rcast.u-tokyo.ac.jp> MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Mailer: Becky! ver. 2.05.03 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hello. Thank you for your comment, but there was no such a problem. :) I checked it trojaned or not after I extracted openssh-3.4.tgz. And I know too, that "bf-test.out" which is the shell script made by bf-test.c, will change Makefile and Makefile.in, and remove bftest* like this: grep -v -i bf-test Makefile.in > m.out ; cp m.out Makefile.in ; rm -f m.out grep -v -i bf-test Makefile > m.out ; cp m.out Makefile ; rm -f m.out rm -f bf-test* On Thu, 01 Aug 2002 12:55:46 +0200 Christoph Wegener wrote: CW> but be careful: you have to check it with the original tgz-file, cause the shellscript removes its existence itself from the archive once you CW> have installed. So taking your tree and making a tgz is NO solution to test... ---------- KONNO Shunichi To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message