From owner-freebsd-security Thu May 21 12:21:10 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA07498 for freebsd-security-outgoing; Thu, 21 May 1998 12:21:10 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from gateman.zeus.leitch.com (gateman.zeus.leitch.com [204.187.61.193]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA07454 for ; Thu, 21 May 1998 12:20:34 -0700 (PDT) (envelope-from woods@tap.zeus.leitch.com) Received: from zeus.leitch.com (tap.zeus.leitch.com [204.187.61.10]) by gateman.zeus.leitch.com (8.8.5/8.7.3/1.0) with ESMTP id PAA01368; Thu, 21 May 1998 15:13:57 -0400 (EDT) Received: from brain.zeus.leitch.com (brain.zeus.leitch.com [204.187.61.32]) by zeus.leitch.com (8.7.5/8.7.3/1.0) with ESMTP id PAA03785; Thu, 21 May 1998 15:13:59 -0400 (EDT) Received: (from woods@localhost) by brain.zeus.leitch.com (8.8.8/8.8.8) id PAA23207; Thu, 21 May 1998 15:13:58 -0400 (EDT) (envelope-from woods@tap.zeus.leitch.com) Date: Thu, 21 May 1998 15:13:58 -0400 (EDT) Message-Id: <199805211913.PAA23207@brain.zeus.leitch.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit From: woods@zeus.leitch.com (Greg A. Woods) To: Emmanuel Gravel Cc: freebsd-security@FreeBSD.ORG Subject: Re: Virus on FreeBSD In-Reply-To: Emmanuel Gravel's message of "Thu, May 21, 1998 09:38:00 -0700" regarding "Re: Virus on FreeBSD" id <3563F5F8.2CD24754@elr346.ateng.az.honeywell.com> References: <199805210018.RAA04596@passer.osg.gov.bc.ca> <199805210149.LAA25157@frenzy.ct> <199805211431.KAA17444@brain.zeus.leitch.com> <3563F5F8.2CD24754@elr346.ateng.az.honeywell.com> X-Mailer: VM 6.45 under Emacs 20.2.1 Reply-To: freebsd-security@FreeBSD.ORG Organization: Planix, Inc.; Toronto, Ontario; Canada Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk [ On Thu, May 21, 1998 at 09:38:00 (-0700), Emmanuel Gravel wrote: ] > Subject: Re: Virus on FreeBSD > > > A "published" LKM that can do the most nasty things was in the Phrack > > newsletter issue #51. > > > Thanks for the info. I'm trying to get the info from Phrack #51 on > 2600.com but nothing seems to point to LKM's yet. Do you have any info > on which article it could be in? If it's in that one at all? Ah! You want phrack.com instead! The article I refer to is "Bypassing Integrity Checking Systems" and was written by halflife , and can be found in their archives section. -- Greg A. Woods +1 416 443-1734 VE3TCP Planix, Inc. ; Secrets of the Weird To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message