Re: Has my webserver been hacked?

From: Bob Ceculski (bob@instantwhip.com)
Date: 05/02/02


From: bob@instantwhip.com (Bob Ceculski)
Date: 2 May 2002 13:05:52 -0700

alan.frame@acm.org (Alan W. Frame) wrote in message news:<1fbgefq.1t5p6wi15hlchsN%alan.frame@acm.org>...
> James Riden <s0197800@dai.ed.ac.uk> wrote:
>
> > Jem Berkes <jb_dontuse.delete@pc9.org> writes:
> >
> > > But my experience (though limited) with Linux gives me the impression that
> > > once anyone gets in, at any access level (user or nobody) the site's as
> > > good as gone.
> >
> > If you can patch all the local root exploits (fpriviledge escalation)
> > as well as the remote attacks, this should be OK. Though there do seem
> > to be plenty of local root attacks coming out all the time.
>
> <http://www.lids.org>
>
> > >I hear BSD is different that way, and still hope to
> > > experiment with it :)
>
> Yeahbut a fair number of recent user-space buffer overflows have
> affected the same, err user-space tools on non-linux systems - q.v.
> OpenSSH, etc.
>
> HTH, Alan

not on OpenVMS ...



Relevant Pages

  • Re: Has my webserver been hacked?
    ... > to be plenty of local root attacks coming out all the time. ... Yeahbut a fair number of recent user-space buffer overflows have ... FWIW, once I've initialised my tripwire databases, I copy them back onto ...
    (comp.os.linux.security)
  • Re: Has my webserver been hacked?
    ... at any access level (user or nobody) the site's as ... If you can patch all the local root exploits ... to be plenty of local root attacks coming out all the time. ...
    (comp.os.linux.security)