Jean Francois Martinez <[EMAIL PROTECTED]> writes:

> On Tue, 23 Jan 2001 20:05:41 +0100 (CET), Bernhard Rosenkraenzer said:
> 
> > On Tue, 23 Jan 2001, Albert E. Whale wrote:
> >  
> >  > Today I found that several unwanted guests have been able to connect via
> >  > ftp (not any more!).  I also found some mysterious files 'running' on
> >  > the server.  I was able to detect the processes using the monitor
> >  > utility (or top).  However, I was UNABLE to find the processes in the ps
> >  > -ax output??????  I've never seen this before.  Is this a new exploit?
> >  
> >  Chances are they replaced your ps with a patched version that doesn't show
> >  their stuff.
> >  Reinstall the procps package. Better yet, reinstall the system. You never
> >  know what else they've done to you.
> >  
> 
> Isn't RedHat playing with fire and making us play with fire by using software
> who is either a regular provider of security problems ie wu-ftpd (what is wrong
> with proftpd?)

proftpd has had a few holes the last years...

> or software  who is _structurally_ unsecure like sendmail?  

Sendmail is widely used, and despite that haven't had any big
incidents the last years

-- 
Trond Eivind Glomsrød
Red Hat, Inc.



_______________________________________________
Redhat-devel-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-devel-list

Reply via email to