Skip to Content.
Sympa Menu

sm-grimoire - Re: [SM-Grimoire]OpenSSH trojan....

sm-grimoire AT lists.ibiblio.org

Subject: Discussion of Spells and Grimoire items

List archive

Chronological Thread  
  • From: Casey Harkins <charkins AT upl.cs.wisc.edu>
  • To: Andrew Stitt <afrayedknot AT thefrayedknot.armory.com>
  • Cc: "Sergey A. Lipnevich" <sergeyli AT pisem.net>, SourceMage Grimoire <sm-grimoire AT lists.ibiblio.org>
  • Subject: Re: [SM-Grimoire]OpenSSH trojan....
  • Date: Fri, 2 Aug 2002 16:21:42 -0500 (CDT)

Should be fine if ssh itself wasn't updated, it would've just rebuild from
/var/spool/sorcery/openssh-x.x.x.tar.gz

-casey


On Thu, 1 Aug 2002, Andrew Stitt wrote:

> so my logs are showing that my sorcery update updated ssl, and thus ssh
> on the morning of the 31st, however theres nothing about a bad md5sum
> anywhere, do i still need to rebuild my system from scratch?
>
> *sighs at the thought of doing anything after working for a full 12 hour
> day*
>
> On Fri, Aug 02, 2002 at 12:30:16AM -0400, Sergey A. Lipnevich wrote:
> > It was compromised on July 30-31, so if 'gaze installed | grep openssh'
> > tells you that you installed it before these dates, do nothing -- you
> > are safe. If it shows you 2002073{0|1}, do nothing still -- you're
> > compromised and the only true dao out of this is through complete wipe
> > out ;-). Unless you're the one who trojaned poor thing...
> > The spell has correct MD5 btw.
> >
> > Robin Cook wrote:
> >
> > >Do all we need to do is recast this once a clean version is posted or
> > >do we need to do something with the spell itself?
> > >
> > >CuZnDragon
> > >Robin Cook
> > >
> > >
> >
> > _______________________________________________
> > SM-Grimoire mailing list
> > SM-Grimoire AT lists.ibiblio.org
> > http://lists.ibiblio.org/mailman/listinfo/sm-grimoire
> _______________________________________________
> SM-Grimoire mailing list
> SM-Grimoire AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-grimoire
>





Archive powered by MHonArc 2.6.24.

Top of Page