From owner-freebsd-security  Sat Aug 18 22:37:35 2001
Delivered-To: freebsd-security@freebsd.org
Received: from webs1.accretive-networks.net (webs1.accretive-networks.net [207.246.154.13])
	by hub.freebsd.org (Postfix) with ESMTP id CE65237B405
	for <freebsd-security@FreeBSD.ORG>; Sat, 18 Aug 2001 22:37:31 -0700 (PDT)
	(envelope-from davidk@accretivetg.com)
Received: from localhost (davidk@localhost)
	by webs1.accretive-networks.net (8.11.1/8.11.3) with ESMTP id f7J4QR060386;
	Sat, 18 Aug 2001 21:26:27 -0700 (PDT)
Date: Sat, 18 Aug 2001 21:26:27 -0700 (PDT)
From: David Kirchner <davidk@accretivetg.com>
X-X-Sender:  <davidk@localhost>
To: Spades <spades@galaxynet.org>
Cc: Adam Tuttle <adamtuttle@sympatico.ca>,
	<freebsd-security@FreeBSD.ORG>
Subject: Re: Rooted
In-Reply-To: <3.0.32.20010819134033.0287f5cc@smtp.magix.com.sg>
Message-ID: <20010818212540.W38221-100000@localhost>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

You may also be backdoored; if you weren't running something like tripwire
to catch changes in your system files, you may want to go ahead and
re-install FreeBSD entirely. May not be necessary, but it shouldn't hurt.

On Sun, 19 Aug 2001, Spades wrote:

>   You probably didn't update your source lately, you may like to cvsup
>
> as quite a few vulnerabilities appeared during the last 3-4 weeks.
>
>
> ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:49/telnetd.patch
>
> ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:49/telnetd.patch.asc
>
>
> # cd /usr/src/
>
> # patch -p << /path/to/patch
>
> # cd /usr/src/libexec/telnetd
>
> # make depend && make all install
>
>
> Spades
>
>
> At 01:09 AM 8/19/01 -0400, you wrote:
>
> >>>>
>
> <excerpt><bigger>My box recently got rooted by a user on mIRC, they  said
> it was because telnet was to old, where can I get a new version of
> telnet?  Also where can i find patches for security on my
> box.</bigger><fontfamily><param>Arial</param>  <bigger>Thanks</bigger>
>
> <bigger>Adam Tuttle</bigger>
>
> </fontfamily></excerpt><fontfamily><param>Arial</param>
>
>
> </fontfamily>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message