Re: nagios backdoor

Zack Colgan <[email protected]>
Newsgroups gmane.network.nagios.user
Organization ClearBearing, Inc.
Message-ID <[email protected]>
On 06/06/2013 03:48 PM, Κοκμάδης Δημήτριος wrote:
> The full text:
> 
> 
> Dear Client
> 
> At the end of last week, Hetzner technicians discovered a "backdoor" in one 
> of our internal monitoring systems (Nagios).
> 
> An investigation was launched immediately and showed that the administration 
> interface for dedicated root servers (Robot) had also been affected. Current 
> findings would suggest that fragments of our client database had been copied 
> externally.  
> 

Sounds more like there was a backdoor into the _server named_ Nagios,
rather than Nagios the application, given the way they identify the
system names there.

-Zack

------------------------------------------------------------------------------
How ServiceNow helps IT people transform IT departments:
1. A cloud service to automate IT design, transition and operations
2. Dashboards that offer high-level views of enterprise services
3. A single system of record for all IT processes
http://p.sf.net/sfu/servicenow-d2d-j
_______________________________________________
Nagios-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.