[BL] Message body is too big: 67905 bytes with a limit of 40KB
sindi keesan
keesan at sdf.lonestar.org
Sun Mar 13 12:35:00 EST 2005
On Sun, 13 Mar 2005 3aoo-cvfd at dea.spamcon.org wrote:
> sindi keesan wrote:
>>
>> I can't think of how someone telnetted and logged
>> in as user could get at the rest of my files to
>> change anything,
>
> A popular method is to create a buffer overflow
> that results in root access.
How? By executing a program with switches set to do this?
Our local bbs has problems with fork bombs. Could someone telnetted to my
computer transfer files to it, for instance via kermit?
>> Can I set in.telnetd somehow to accept logins only
>> from certain users on a list?
>
> Yes, but you would need to run it from from inetd
> (which is the normal way of running a telnet server).
Does the utelnetd program recently posted also allow this?
>
>> What would they want to use my computer for? A
>> dialed-in computer is not very useful to send spam
>> through, is it?
>
> They don't know it's dialed-in. They simply see an
> open telnet server and jump on it. As I said before,
> their rootkit is unlikely to work on BL3. But the
> attempt to install it might hose your filesystem.
Maybe this is why I get spams that have South Africa and Japan in their
Received lines but claim to come from Canada.
>> How would this happen? Would I notice if someone
>> from outside were telnetted into my computer?
>
> It takes very little time to install a rootkit
> (the purpose of which is to conceal all signs of
> the invader). If the installation is successful,
> you will probably notice nothing.
How does a rootkit work and what does it look like?
>> Got to go find my partner the 'real' sed.
>> He keeps running into commands not present or
>> not working completely in busybox. I installed
>> sh_utils and txt_utils already - is there any
>> other package that would help?
> Did you look for sed in MANIFEST.gz ?
Yes he did and then he noticed he already had the regular version.
I showed him how to do ls -l sed .
Dyslexia and linux don't mix well.
>
> Cheers,
> Steven
> ____________________________
> http://www.basiclinux.com.ru
> _______________________________________________
> BasLinux mailing list
> BasLinux at lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/baslinux
>
keesan at sdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org
More information about the BasLinux
mailing list