Re: GNU FTP server compromised

Matthias Benkmann wrote:
> http://ftp.gnu.org/MISSING-FILES.README

thats pretty scary

i already knew a few days ago that the webserver had been cracked due to an ssh
v1 exploit (btw, i hope everyone has "Protocol 2" set in /etc/ssh/sshd_config
unless they REALLY need v1), but i had no idea about FTP. at the time i reported
some broken links on the webpage, i was given a GPG signed list of md5sums on
the FTP server from a few months ago compared with a list from that day, and
everything matched.

scary,

cheers,
Sam
-- 
If they were so inclined, they could impeach him because they don't like his
necktie.
-- Attorney General William Saxbe

-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
Unsubscribe: See the above information page

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/Oohph5Q4qVL9G8kRAvKbAJ9363g9KkjRs4/M+CWjxoY1PZrshQCeL7lE
x+w4i11ph8BkuGzHkSBJ8+w=
=JTlW
-----END PGP SIGNATURE-----