Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 01 Aug 2002 14:58:26 +0200
From:      Christoph Wegener <cwe@bph.ruhr-uni-bochum.de>
To:        "Naga Suresh B" <torvalds@addr.com>
Cc:        security@freebsd.org
Subject:   Re: openssh-3.4p1.tar.gz trojaned
Message-ID:  <VPFBZV05TPCBURA71E1XUKEGF4RO.3d493072@gonzo>
In-Reply-To: <016301c23957$7d8436f0$9600a8c0@blraddrcom>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,
what do you mean?!? If you mean if another trojaned host will attack you I can say that the trojan code we saw this morning has an 
hardcoded IP address (203.62.158.32:6667, which is secured now) so you will be safe - at least for now... If you mean how you can find 
out if your host was trojaned please read the archived mails from today...

Cheers
Christoph

1.8.2002 14:32:22, "Naga Suresh B" <torvalds@addr.com> wrote:

>how we can findout that trojaned attacked our server or not.
--
    .-.                             Ruhr-Universitaet Bochum
    /v\    L   I   N   U   X        Lehrstuhl fuer Biophysik
   // \\  >Penguin Computing<       c/o Christoph Wegener
  /(   )\                           Gebaeude ND 04/Nord
   ^^-^^                            D-44780 Bochum, GERMANY

Tel: +49 (234) 32-25754             Fax: +49 (234) 32-14626
mailto:cwe@bph.ruhr-uni-bochum.de   http://www.bph.ruhr-uni-bochum.de





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?VPFBZV05TPCBURA71E1XUKEGF4RO.3d493072>