on Wed, Nov 21, 2001 at 12:49:21AM -0800, Jim McCloskey ([EMAIL PROTECTED])
wrote:
> I've turned telnet off again. If anyone has any further advice, I'd be
> really grateful,
SSH clients are widely available for _any_ viable computer platform,
from Mac to MVS. No need to risk your entire system
Jim McCloskey said:
>
> I've not had to deal with such an exploit before, so I would really
> appreciate any advice that's going. I've stopped the lprng daemon
> for now, until I can tighten things up.
depending on the box and it's uses most likely if it was
mine i would reinstall. thats really t
SaDIKuZboy" <[EMAIL PROTECTED]>
|> it could be something as a backdoor or an arbitrary service ... try
|> to : cron -l it shows u a table with binary called to be run,
|> report it and let's see what's there :o)
Thanks for your help. Maybe you meant crontab -l?
But I'm pretty certain in any ca
Answer at bottom
- Original Message -
From: "Jim McCloskey" <[EMAIL PROTECTED]>
To:
Sent: Wednesday, November 21, 2001 2:09 AM
Subject: weird messages in syslog
>
> I have the following in syslog (and in /var/log/messages):
>
> Nov 20 01:18:12 localhost S
"nate" <[EMAIL PROTECTED]> wrote:
|> looks like you might of been hit with a lprng exploit .. >>
|>
|> http://www.securityfocus.com/archive/1/85002
|>
|> hope your lprng is updated!
Rick Pasotto <[EMAIL PROTECTED]> wrote:
|> I've occasionally been getting something similar. I think I've
|> trac
On Tue, Nov 20, 2001 at 05:09:10PM -0800, Jim McCloskey wrote:
>
> I have the following in syslog (and in /var/log/messages):
>
> Nov 20 01:18:12 localhost SERVER[21311]: Dispatch_input: bad request
> line
> 'BBÜóÿ¿Ýóÿ¿Þóÿ¿ßóÿ¿XX%.156u%300$n%.21u%301$nsecurity%302$n%.192u%303$n\22
Jim McCloskey said:
>
> I have the following in syslog (and in /var/log/messages):
>
> Nov 20 01:18:12 localhost SERVER[21311]: Dispatch_input: bad
> request line
> 'BBÜóÿ¿Ýóÿ¿Þóÿ¿ßóÿ¿XX%.156u%300$n%.21u%301$nsecurity%302$n%.192u%303$n\220\220\220\220\220\220\220\220\220>
> and so o
I have the following in syslog (and in /var/log/messages):
Nov 20 01:18:12 localhost SERVER[21311]: Dispatch_input: bad request
line
'BBÜóÿ¿Ýóÿ¿Þóÿ¿ßóÿ¿XX%.156u%300$n%.21u%301$nsecurity%302$n%.192u%303$n\220\220\220\220\220\220\220\220\220
and so on and so on and so on.
It's rep
8 matches
Mail list logo
