brightstor/arcserve backup client hacked
Andrew Daviel <[email protected]> Mon, 28 Feb 2005 14:53:35 -0800 (PST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
Yesterday we had a number of Windows machines hacked via port 41523. The attacker came in from a cable modem in Portugal then installed a rootkit from the Czech Republic ... This seems to be a vulnerability in Computer Associates BrightStor backup (ARCserve) http://archives.neohapsis.com/archives/bugtraq/2005-02/0123.html some tcpdump data availalbe if anyone interested -- Andrew Daviel, TRIUMF, Canada Tel. +1 (604) 222-7376 (Pacific Time) [email protected] _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions