In a message dated: Tue, 01 Jul 2003 12:22:14 EDT
Bruce Dawson said:
>hive.codemeta.com was compromised yesterday around 3pm. It looks like they
>replaced sendmail and apache with their own versions. I've run some audits
>and got back lots of suspicious files, so its going to take a while to
>poke around.
What was the method of compromise? An old apache, kernel, sendmail, etc.?
Just curious.
--
Seeya,
Paul
--
Key fingerprint = 1660 FECC 5D21 D286 F853 E808 BB07 9239 53F1 28EE
It may look like I'm just sitting here doing nothing,
but I'm really actively waiting for all my problems to go away.
If you're not having fun, you're not doing it right!
_______________________________________________
Gnhlug-org mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-org