Skip to Content.
Sympa Menu

sm-grimoire - Re: [SM-Grimoire]OpenSSH trojan....

sm-grimoire AT lists.ibiblio.org

Subject: Discussion of Spells and Grimoire items

List archive

Chronological Thread  
  • From: Andrew Stitt <afrayedknot AT thefrayedknot.armory.com>
  • To: "Sergey A. Lipnevich" <sergeyli AT pisem.net>
  • Cc: SourceMage Grimoire <sm-grimoire AT lists.ibiblio.org>
  • Subject: Re: [SM-Grimoire]OpenSSH trojan....
  • Date: Thu, 1 Aug 2002 21:44:48 -0700

so my logs are showing that my sorcery update updated ssl, and thus ssh
on the morning of the 31st, however theres nothing about a bad md5sum
anywhere, do i still need to rebuild my system from scratch?

*sighs at the thought of doing anything after working for a full 12 hour day*

On Fri, Aug 02, 2002 at 12:30:16AM -0400, Sergey A. Lipnevich wrote:
> It was compromised on July 30-31, so if 'gaze installed | grep openssh'
> tells you that you installed it before these dates, do nothing -- you
> are safe. If it shows you 2002073{0|1}, do nothing still -- you're
> compromised and the only true dao out of this is through complete wipe
> out ;-). Unless you're the one who trojaned poor thing...
> The spell has correct MD5 btw.
>
> Robin Cook wrote:
>
> >Do all we need to do is recast this once a clean version is posted or
> >do we need to do something with the spell itself?
> >
> >CuZnDragon
> >Robin Cook
> >
> >
>
> _______________________________________________
> SM-Grimoire mailing list
> SM-Grimoire AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-grimoire




Archive powered by MHonArc 2.6.24.

Top of Page