[LUAU] Millenium Worm

Doug Stanfield DOUGS at oceanic.com
Fri Apr 16 08:33:10 PDT 1999


What do you have opened up in your inetd.conf.  From the message it looked
like it used the following holes: # * imap4 v10.X * qualcomm popper * bind
with iquery * mountd

Do you have imap or pop3 running from inetd?  Have you got named running
(check with a 'ps aux | grep named')?  Are you running the mount demon?

-Doug-

> -----Original Message-----
> From: George Toft [mailto:LinuxAdvocate at iname.com]
> Sent: Thursday, April 15, 1999 11:45 PM
> To: luau at luau.hi.net
> Subject: Re: [LUAU] Millenium Worm
> 
> 
> Barnaby DiAnni wrote:
> > 
> > Here's a quick link.
> > 
> > http://redhat-security.ens.utulsa.edu/
> > 
> > Some things are red hat specific.. but inetd.conf and tcp 
> wrappers apply to
> > everybody.
> > 
> > Simple but effective security measures can be put in place 
> in less than ten
> > minutes.
> 
> Got all of these, except shadow passwords.  What am I
> missing?
> 
> George
> --
>      __   __  __________  __
>     / /  / / / / __  / / / /  Home Page: http://luau.hi.net
>    / /__/ /_/ / /_/ / /_/ /
>   /____/\____/_/ /_/\____/  LUAU - Linux Users AnonymoUs - Hawaii
> 
>    To unsubscribe: echo unsubscribe luau | mail majordomo at luau.hi.net
>            LUAU meetings are the 3rd Tuesday of each month 6pm
> 
--
     __   __  __________  __
    / /  / / / / __  / / / /  Home Page: http://luau.hi.net
   / /__/ /_/ / /_/ / /_/ /
  /____/\____/_/ /_/\____/  LUAU - Linux Users AnonymoUs - Hawaii

   To unsubscribe: echo unsubscribe luau | mail majordomo at luau.hi.net
           LUAU meetings are the 3rd Tuesday of each month 6pm



More information about the LUAU mailing list