Date: Wed, 20 Sep 2000 18:04:46 -0700 From: Kris Kennaway <kris@FreeBSD.org> To: Brandon Fosdick <bfoz@glue.umd.edu> Cc: stable@freebsd.org Subject: Re: Odd log entries...an attempted breakin? Message-ID: <20000920180446.B81946@freefall.freebsd.org> In-Reply-To: <39C8C50C.CA929D8C@glue.umd.edu>; from bfoz@glue.umd.edu on Wed, Sep 20, 2000 at 10:09:16AM -0400 References: <39C8C50C.CA929D8C@glue.umd.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Sep 20, 2000 at 10:09:16AM -0400, Brandon Fosdick wrote:
> For the last week or so I've been seeing the following entries in
> /var/log/messages:
>
> Sep 17 01:17:11 nbf-27 rpc.statd: Invalid hostname to sm_mon:
> ^D÷ÿ¿^D÷ÿ¿^E÷ÿ¿^E÷ÿ¿^F÷ÿ¿^F÷ÿ¿^G÷ÿ¿^G÷ÿ¿%08x %08x %08x %08x %08x %08x
> %08x %08x
Someone is trying to exploit a root hole in the Linux rpc.statd.
ou don't have anything to worry about running FreeBSD here :-)
However, firewalling is always a good idea.
Kris
--
In God we Trust -- all others must submit an X.509 certificate.
-- Charles Forsythe <forsythe@alum.mit.edu>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000920180446.B81946>