[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
statd attach
- To: misc_(_at_)_openbsd_(_dot_)_org
- Subject: statd attach
- From: OpenBSD <openbsd_(_at_)_purdue116_(_dot_)_gte_(_dot_)_net>
- Date: Tue, 27 Jan 1998 11:32:34 -0500 (EST)
I've recently seen in the log files of my home and office solaris machines
messages of the sort:
Jan 25 15:58:34 hopf statd[138]: attempt to create "/var/statmon/sm//../
../../../../../../../../../../../../../../../../../../../../../../../../../../..
/../../../../../../../../../../../../../../../../../../../../../../../../../../.
./../../../../../../../../../../../../../../../../../../../../../../../../../../
../../../..//../../../../../../../../../../../../../../../../../../../../../../.
./../../../../../../../../../../../../../../../../../../../../../../../../../../
../../../../../../../../../../../../../../../../../../../../../../../../../../..
/../../../../../../../../../../../tmp/.nfs09 D H $ $ $ $
` O * * * * # # \174 P *` c 6
\175 ) \175 # # ;
# XbinXsh tirdwr "
This was followed by an unauthorized login as root.
Does anyone know about such attacks? Does it apply to openbsd also?
Thanks, Clarence Wilkerson
Visit your host, monkey.org