Re: GNU FTP server compromised

Don Smith <[email protected]> Thu, 14 Aug 2003 14:03:15 -0400

Newsgroups	gmane.linux.lfs.security
Organization	Linux From Scratch
Message-ID	<[email protected]>

Lukas Gruber wrote:

> On Thu, 14 Aug 2003 12:47:18 -0400
> Jason Gurtz <[email protected]> wrote:
> 
>>I wonder what ftp server they use.  For a time at least, I believe
>>they were using wuftpd :{
> 
> proftpd says they are running proftpd.
> but i dont if this is correct.
> http://proftpd.linux.co.uk/sites.html
> 

Be careful not to confuse the ftp server *host* with the ftp server 
*program*. It was the host that was compromised through a local user 
login. The warning was just in case the cracker put a trojan horse into 
the packages on the server, which he appears to have not done.

-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
Unsubscribe: See the above information page