[ LUGOS-SEC ] Linux crv Lion/1i0n (fwd)

[Martin]

He he, to ne dela crt. To delajo script kiddiji.
In res obstaja program ki avtomaticno poskenira b,c klase
vendar vse kar naredi je, da doda vrstico v inetd.conf in killall -HUP
inetd.
Potem skript kiddiji namestijo pac svoje rootkite, backdoore.

----- Original Message -----
From: Roman Maurer <roman.maurer at amis.net>
To: lugos-sec <lugos-sec at lugos.si>
Sent: Tuesday, March 27, 2001 10:53 PM
Subject: [ LUGOS-SEC ] Linux crv Lion/1i0n (fwd)


> -------- Original Message --------
> Subject: Linux crv Lion/1i0n
> Date: Tue, 27 Mar 2001 12:19:22 +0200
> From: Gorazd Bozic <gorazd.bozic at arnes.si>
> Organization: ARNES
> Newsgroups: si.comp.security
>
> Po internetu se siri crv Lion (oz. 1i0n), ki izkorisca pomankljivost v
> obravnavi TSIG zahtev nekaterih verzij BIND streznika. Vec o tem si lahko
> preberete na
>
> http://www.arnes.si/si-cert/obvestila/2001-02.html
>
> Gorazd
>