doesn't change the facts about serv-u (i was just too lazy to google
for specifics, so I cited what I remembered) :)

but anyway...

http://www.informit.com/articles/article.asp?p=30286&seqNum=5&rl=1
"the script will be using Servu-FTP, which is the most common FTP
server used by hackers."

http://www-tus.csx.cam.ac.uk/pc_support/security/serv-u.html
"The most commonly found ftp server on compromised machines is Rhino
software's Serv-U ftp server."

http://www.norman.com/Virus/Virus_descriptions/9804/en
"This is not a virus or trojan, but a commercially available FTP
server application. This FTP server, originally called FTP Serv-U, is
used as a tool by several backdoors and denial-of-service tools.
It is important to understand that FTP Serv-U is not malicious per se;
instead it provides functions that can enable hackers to set up remote
access to files on the local computer."

Google.  there's a lot more.

Really surprised to even be asked the question of why using a tool
that's popular with the hacker crowd is a bad thing.


On 10/10/05, Mark A Kruger <[EMAIL PROTECTED]> wrote:
> Charlie,
>
> That second item on your list is a virus or worm that was going around
> (probably still is) that named itself "serv-u". It had nothing to do with
> the "serv-u" server per se. The creator used "serv-u" because it was common
> enough to not raise red flags on some servers and even home pcs.
>
> -mark
>
>
> -----Original Message-----
> From: Charlie Griefer [mailto:[EMAIL PROTECTED]
> Sent: Monday, October 10, 2005 10:11 AM
> To: CF-Talk
> Subject: Re: FTP Server
>
>
> the fact that it's popular with the hacker crowd?
>
> How about because i was running serv-u and one day i inexplicably had
> FTP accounts open on drives A-Z with
> read/write/execute/delete/procreate access to all (and oddly enough, i
> didn't create any of those accounts).
>
> How about one of the previous posters who mentioned finding a copy of
> Serv-U on their server even though they didn't install it?
>
> How is the fact that the hacker crowd seems to be able to manipulate
> just about any install of Serv-U to their will (regardless of whose
> machine it's on), not be a negative thing???
>
> On 10/10/05, Ken Ferguson <[EMAIL PROTECTED]> wrote:
> > I'd be very interested in hearing why exactly you seem to think that
> > this is a negative for Serv-U???
> >
> > --Ferg
> >
> > Charlie Griefer wrote:
> >
> > >serv-U's also popular with the hacker crowd :)
> > >
> > >i've been running the filezilla server for a while now with no
> > >problems.  caveat...i'm running it on my home machine and basically
> > >just use it for personal FTP.  it's not under a business-type load.
> > >
> > >'free' didn't used to be a bad thing :)
> > >
> > >
> >
> >
> >
>
>
>
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:220564
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to