I was hesitant to post this but http://www.securiteam.com/exploits/5IP0L1PC1O.html
Details what is vulnerable and the code to exploit it. I did take the patch seriously, I think my system was exposed for about an hour (it could've been longer) due to the order in which I was updating things. The guy who hacked me was/is running warez and DVD images off of my PC. I think he's got a linux shell running somewhere as no matter what programs, reg keys, etc I remove something always seems to re-appear. The box should be replaced today - but I'm going to check it with partition magic to see if somehow there is a hidden partition that I can't see or monitor from windows. Marc -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Klinge Sent: Friday, May 07, 2004 10:53 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] DAMN LDAP EXPLOIT! Take it seriously > No it's not the same. The exploit is with the old LDAP > service in pre-8.1 implementations. The current > implementation was not interweaved into the old LDAP code. > It completely replaced it. I would suggest that any patch > that fixes any exploit, no matter how it's worded in the > release notes, be taken seriously and people should patch > their systems. > So the problems shown here: http://www.securityfocus.com/bid/3049/discussion/ probably don't apply to this version? I'm just wondering because we were really wanting to use the LDAP functionality. TIA, ~Rick ___________________________________________________________________ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
