Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 5 Feb 1997 07:29:21 -0800 (PST)
From:      Ricardo Kleemann <ricardo@americasnet.com>
To:        FreeBSD ISP list <freebsd-isp@freebsd.org>
Subject:   hacking - help
Message-ID:  <Pine.LNX.3.95.970205072232.1101A-100000@irvine.americasnet.com>

next in thread | raw e-mail | index | archive | help
Hi,

Today I noticed someone was logged into my freebsd machine, as user ftp.
I immediately killed the shell and saw that soon he was back in.

I then just made sure ftp had no shell, in hopes he wont be able to get
in.

But, the real question is, what hole must I plug to prevent this? Is there
a known hole where someone can log in as ftp and gain root access?

Thank God, it seems no damage was done (I hope! I haven't noticed anything
other than wtmp was erased).

Also, does freebsd support host.allow and host.deny? I didn't see those
files in /etc and there was no man page

Thanks for any help!
Ricardo




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.3.95.970205072232.1101A-100000>