Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Nov 100 23:09:40 -0500 (EST)
From:      mwlucas@exceptionet.com
To:        will@physics.purdue.edu
Cc:        security@freebsd.org
Subject:   Re: FreeBSD hacked?
Message-ID:  <200012010409.XAA10308@easeway.com>
In-Reply-To: <20001130181141.Y559@puck.firepipe.net> from Will Andrews at "Nov 30, 0 06:11:41 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
[cc's trimmed]
> *Apparently* only a html file was changed.. so you don't know it was
> rooted.  It'd be pretty hard to root *.freebsd.org boxes..

True, my bad.

Still, having a html file changed through a CGI exploit is enough to make
you run for your Tripwire disk.  Think about it:

"Nah, I just changed the web page, I didn't root you and install a back
door.  Really." 

Wow, that sends *my* trust level soaring.

==ml

-- 
Michael Lucas			|
Exceptionet, Inc.		|	www.exceptionet.com
"Exceptional Networking"	|


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200012010409.XAA10308>