RE: !SPAM! [Full-Disclosure] Automated ssh scanning

From: Richard Verwayen (holle_at_ackw.de)
Date: 08/26/04

  • Next message: Gerry Eisenhaur: "Re: [Full-Disclosure] Automated ssh scanning" 
    To: FD <full-disclosure@lists.netsys.com>
Date: Thu, 26 Aug 2004 15:41:18 +0200

    On Thu, 2004-08-26 at 15:12, Todd Towles wrote:
    > The kernel could be save. But with weak passwords, you are toast. Any
    > automated tool would test guest/guest.
    >
    Hello Todd!

    You are right about the passwords, but guest is only a unprivileged
    account as you may have on many prodruction machines. But they managed
    to become root on this machine due to a kernel(?) exploit!
    Should I then consider any woody system to be insecure to let people
    work at?

    Richard

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Gerry Eisenhaur: "Re: [Full-Disclosure] Automated ssh scanning"

    Relevant Pages

    • RE: !SPAM! [Full-Disclosure] Automated ssh scanning
      ... > The kernel could be save. ... But with weak passwords, you are toast. ... account as you may have on many prodruction machines. ... Charter: http://lists.netsys.com/full-disclosure-charter.html ...
      (Full-Disclosure)
    • RE: !SPAM! [Full-Disclosure] Automated ssh scanning
      ... >> The kernel could be save. ... But with weak passwords, you are toast. ... > to become root on this machine due to a kernelexploit! ... > Should I then consider any woody system to be insecure to let people ...
      (Full-Disclosure)
    • Re: !SPAM! [Full-Disclosure] Automated ssh scanning
      ... > account as you may have on many prodruction machines. ... Or an exploit of any of the set-UID root or runs-as-root programs on the system. ... VeNoMouS posted ID's of most of the kits you found. ... Debian Woody isn't patched for the kernel do_brk or ptrace holes yet. ...
      (Full-Disclosure)
    • RE: !SPAM! [Full-Disclosure] Automated ssh scanning
      ... The kernel could be save. ... But with weak passwords, you are toast. ... automated tool would test guest/guest. ... Automated ssh scanning ...
      (Full-Disclosure)
    Loading