From owner-freebsd-bugs  Sun Jan  7 18:49:31 2001
Delivered-To: freebsd-bugs@freebsd.org
Received: from elvis.mu.org (elvis.mu.org [207.154.226.10])
	by hub.freebsd.org (Postfix) with ESMTP id 3BB2737B6CF
	for <freebsd-bugs@FreeBSD.org>; Sun,  7 Jan 2001 18:48:04 -0800 (PST)
Received: by elvis.mu.org (Postfix, from userid 1098)
	id 7D4402B359; Sun,  7 Jan 2001 20:47:53 -0600 (CST)
Date: Sun, 7 Jan 2001 20:47:53 -0600
From: Bill Fumerola <billf@mu.org>
To: cowei <cowei@sina.com>
Cc: freebsd-bugs@FreeBSD.org
Subject: Re: Please help error on rpc.statd.
Message-ID: <20010107204753.A89325@elvis.mu.org>
References: <002601c07917$e2c78870$c564a8c0@hainan.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <002601c07917$e2c78870$c564a8c0@hainan.net>; from cowei@sina.com on Mon, Jan 08, 2001 at 10:08:23AM +0800
X-Operating-System: FreeBSD 4.2-FEARSOME-20001103 i386
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Mon, Jan 08, 2001 at 10:08:23AM +0800, cowei wrote:
> Dear Miss/Sir:
> 
> I get a freebsd running.  I always meet this problem. Is there anybody ever meet this or know how to resolve it?
> 
> Thanks
> Cowei.
> 
> Jan  4 08:54:02 web rpc.statd: invalid hostname to sm_stat: ^X<F7><FF><BF>^X<F7><FF><BF>^Y<F7><FF><BF>^Y<F7>
> <FF><BF>^Z<F7><FF><BF>^Z<F7><FF><BF>^[<F7><FF><BF>^[<F7><FF><BF>%8x%8x%8x%8x%8x%8x%8x%8x%8x%236x%n%137x%n%10x%n
> %192x%nM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^P
> M-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^
> PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-
> ^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM
> -^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^P
> M-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^
> PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-
> ^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^P

It's someone trying to use a linux exploit on your machine. Luckily
our rpc.statd isn't vulnerable.

-- 
Bill Fumerola - security yahoo         / Yahoo! inc.
              - fumerola@yahoo-inc.com / billf@FreeBSD.org





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message