Date: Wed, 22 Jul 1998 12:18:21 -0600 From: Brett Glass <brett@lariat.org> To: "Jordan K. Hubbard" <jkh@time.cdrom.com> Cc: ben@rosengart.com, Jim Shankland <jas@flyingfox.com>, ahd@kew.com, leec@adam.adonai.net, security@FreeBSD.ORG Subject: Re: hacked and don't know why Message-ID: <199807221818.MAA07833@lariat.lariat.org> In-Reply-To: <14999.901130389@time.cdrom.com> References: <Your message of "Wed, 22 Jul 1998 10:35:51 MDT." <199807221635.KAA06020@lariat.lariat.org>
next in thread | previous in thread | raw e-mail | index | archive | help
At 10:59 AM 7/22/98 -0700, Jordan K. Hubbard wrote: >You're assuming that the hackers knew what they were doing or that >they didn't attempt to run other exploit scripts which malfunctioned. Well, when *I* touched files their directory entries were also corrupted. This indicates that something deep within the system was hosed. And since the problem went away after a reboot, it appears to be the result of memory corruption. Even other exploit scripts would run in userland, so this suggests (no, there's no good way to establish it for sure yet) that the integrity of the kernel was breached. --Brett To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199807221818.MAA07833>