From owner-freebsd-security@FreeBSD.ORG Mon Nov 21 16:17:06 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6491716A41F for ; Mon, 21 Nov 2005 16:17:06 +0000 (GMT) (envelope-from reichert@numachi.com) Received: from meisai.numachi.com (meisai.numachi.com [198.175.254.6]) by mx1.FreeBSD.org (Postfix) with SMTP id 0CE3843D53 for ; Mon, 21 Nov 2005 16:17:04 +0000 (GMT) (envelope-from reichert@numachi.com) Received: (qmail 4763 invoked from network); 21 Nov 2005 16:17:01 -0000 Received: from natto.numachi.com (198.175.254.216) by meisai.numachi.com with SMTP; 21 Nov 2005 16:17:01 -0000 Received: (qmail 68378 invoked by uid 1001); 21 Nov 2005 16:16:59 -0000 Date: Mon, 21 Nov 2005 11:16:59 -0500 From: Brian Reichert To: Dag-Erling Sm?rgrav Message-ID: <20051121161659.GB48887@numachi.com> References: <20051117012552.46503.qmail@web51607.mail.yahoo.com> <20051117155429.GD38047@numachi.com> <864q66l02e.fsf@xps.des.no> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <864q66l02e.fsf@xps.des.no> User-Agent: Mutt/1.5.10i Cc: freebsd-security@freebsd.org, Mark Jayson Alvarez Subject: Re: Need urgent help regarding security X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Nov 2005 16:17:06 -0000 On Mon, Nov 21, 2005 at 12:20:09PM +0100, Dag-Erling Sm?rgrav wrote: > Brian Reichert writes: > > I had a 4.9 box compromised though the ssh install (I'm certain it > > wasn't openssh, but the base install), and was running an irc server > > itself. > > OpenSSH has been part of the base system since 4.0. Ah, then perhaps the issue was the vesion of openssh that part of the base system, as opposed to the actively maintained port. Whatever; it only happened the once, and I've learned to keep a tighter watch on such issues... > DES > -- > Dag-Erling Sm?rgrav - des@des.no -- Brian Reichert 55 Crystal Ave. #286 Daytime number: (603) 434-6842 Derry NH 03038-1725 USA BSD admin/developer at large