[BL] Message body is too big: 67905 bytes with a limit of 40KB
3aoo-cvfd at dea.spamcon.org
3aoo-cvfd at dea.spamcon.org
Sun Mar 13 01:23:52 EST 2005
sindi keesan wrote:
>
> I can't think of how someone telnetted and logged
> in as user could get at the rest of my files to
> change anything,
A popular method is to create a buffer overflow
that results in root access.
> Can I set in.telnetd somehow to accept logins only
> from certain users on a list?
Yes, but you would need to run it from from inetd
(which is the normal way of running a telnet server).
> What would they want to use my computer for? A
> dialed-in computer is not very useful to send spam
> through, is it?
They don't know it's dialed-in. They simply see an
open telnet server and jump on it. As I said before,
their rootkit is unlikely to work on BL3. But the
attempt to install it might hose your filesystem.
> How would this happen? Would I notice if someone
> from outside were telnetted into my computer?
It takes very little time to install a rootkit
(the purpose of which is to conceal all signs of
the invader). If the installation is successful,
you will probably notice nothing.
> Got to go find my partner the 'real' sed.
> He keeps running into commands not present or
> not working completely in busybox. I installed
> sh_utils and txt_utils already - is there any
> other package that would help?
Did you look for sed in MANIFEST.gz ?
Cheers,
Steven
____________________________
http://www.basiclinux.com.ru
More information about the BasLinux
mailing list