RE: [Samba] Huh... 2.2.8 exploit?!

2003-07-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 30 Jun 2003, Vizitiu, Ciprian wrote: Jun 30 16:17:39 server smbd[28856]: [2003/06/30 16:17:39, 0] lib/fault.c:fault_report(38) Jun 30 16:17:39 server smbd[28856]: === Jun 30

[Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Vizitiu, Ciprian
... By my mistake a 2.2.8a-1 running on RH8 was exposed to the Internet. It was cracked in a matter of hours. I noticed it because they've deleted my smbd. :-| I'm ready to reinstall the machine, if there are any logs that anybody is interested into please say it now. -- To unsubscribe from

Re: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Nejc Skoberne
Hi. ... By my mistake a 2.2.8a-1 running on RH8 was exposed to the Internet. It was cracked in a matter of hours. I noticed it because they've deleted my smbd. :-| 2.2.8a cracked? Isn't this supposed to be the most stable release? I'm ready to reinstall the machine, if there are any logs

Re: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Jeremy Allison
On Mon, Jun 30, 2003 at 06:08:02PM +0200, Vizitiu, Ciprian wrote: ... By my mistake a 2.2.8a-1 running on RH8 was exposed to the Internet. It was cracked in a matter of hours. I noticed it because they've deleted my smbd. :-| I'm ready to reinstall the machine, if there are any logs that

Re: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Gmes Gza
Vizitiu, Ciprian rta: ... By my mistake a 2.2.8a-1 running on RH8 was exposed to the Internet. It was cracked in a matter of hours. I noticed it because they've deleted my smbd. :-| I'm ready to reinstall the machine, if there are any logs that anybody is interested into please say it now.

RE: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Vizitiu, Ciprian
Are you really shure, that the computer was breaked through samba, you can be sure only if just the samba ports (137,138,139,445) was opened to the Internet?! Yes, totally agree with you. Maybe my message was... No, for sure my message was badly formulated. I had a RH8 machine with

Re: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Oliver Schulze L.
Signal 11, mmm, that could be a memory error(hardware). Is the hardware certified? (www.memtest86.com) HTH Oliver Vizitiu, Ciprian wrote: Are you really shure, that the computer was breaked through samba, you can be sure only if just the samba ports (137,138,139,445) was opened to the

Re: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Nejc Skoberne
Hi. Signal 11, mmm, that could be a memory error(hardware). Is the hardware certified? (www.memtest86.com) If it was a hardware error; why would be smbd deleted? -- Nejc Skoberne Grajska 5 SI-5220 Tolmin E-mail: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and

RE: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Vizitiu, Ciprian
Signal 11, mmm, that could be a memory error(hardware). Is the hardware certified? (www.memtest86.com) :-D ... Well it's a IBM e-server. No, I didn't change the original memory modules. If it was a hardware error; why would be smbd deleted? Good question. -- To unsubscribe from this

RE: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Rashkae
For that matter, why would smbd (but not the system logs) be deleted in the first place? Jun 30 2:37am They hang the man and flog the woman That steal the goose from off the common, But let the greater villain loose That steals the common from the

RE: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread David Morel
Le lun 30/06/2003 à 08:38, Rashkae a écrit : For that matter, why would smbd (but not the system logs) be deleted in the first place? on which FS type on does smbd reside ? Jun 30 2:37am They hang the man and flog the woman That steal the

RE: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Vizitiu, Ciprian
Le lun 30/06/2003 à 08:38, Rashkae a écrit : For that matter, why would smbd (but not the system logs) be deleted in the first place? on which FS type on does smbd reside ? ext3. But it served files from a [Homes] on a ReiserFS -- To unsubscribe from this list go to the following URL and read