Redhat 6.2 Honeypot Hacked

From: Stephen Holcroft (stephen_holcroft@hotmail.com)
Date: 04/10/02 

Date: 10 Apr 2002 07:21:05 -0000
From: Stephen Holcroft <stephen_holcroft@hotmail.com>
To: incidents@securityfocus.com
('binary' encoding is not supported, stored as-is)

Hello,

My Redhat 6.2 server Honeypot was compromised
recently after just 26 minutes of being connected to
the internet, it was used as an IRC proxy for two
hours after being hacked.

Details of the incident can be seen at:-

http://www.lucidic.net/whitepapers/sholcroft-4.1-
2002.html.

Best Regards,

Steve

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com

Relevant Pages

  • Slapper worm DoS
    ... I am dropping the known worm ports for ... At the Santa Fe Office: Internet at Cyber Mesa ... For more information on this free incident handling, ...
    (Incidents)
  • rpc.statd root on a Redhat 7.0 box....
    ... rpc.statd root on a Redhat 7.0 box.... ... I'm cleaning up a box that was rooted by a rpc.statd exploit. ... For more information on this free incident handling, ...
    (Incidents)