Hvor lang tid har DU til at patche dine servere ?

From: Henrik Kramshøj (none@henrik.kramshoj--vigilante.com.lh.bsd-dk.dk)
Date: Tue 24 Jul 2001 - 10:16:39 CEST 

From: Henrik Kramshøj <none@henrik.kramshoj--vigilante.com.lh.bsd-dk.dk>
To: "'bsd-dk@bsd-dk.dk'" <none@bsd-dk--bsd-dk.dk.lh.bsd-dk.dk>
Subject: Hvor lang tid har DU til at patche dine servere ?
Date: Tue, 24 Jul 2001 10:16:39 +0200

Hejsa

Nu spammer hkr IGEN :-)

Jeg er chokeret !

Før i tiden gik der dage før en sårbarhed der blev annonceret på
mailinglister eller lignende
blev udnyttet af hackere ...

Idag går der måske et par timer før scriptkiddiez går igang ...

Eksempel 1:
http://www.safemode.org/
23-07 By: Fluffy Bunny http://stileproject.com (
mirror / nmap / os )

Hvis man går til deres side henvises til FreeBSD advisory
FreeBSD-SA-01:49 Security Advisory
                                         FreeBSD, Inc.

Topic: telnetd contains remote buffer overflow

Category: core
Module: telnetd
Announced: 2001-07-23
Credits: Sebastian <none@scut--nb.in-berlin.de.lh.bsd-dk.dk>
Affects: All releases of FreeBSD 3.x, 4.x prior to 4.4,
                FreeBSD 4.3-STABLE prior to the correction date
Corrected: 2001-07-23
FreeBSD only: NO

Check datoen på advisory mod dato for hack ...

Det er ikke til at vide om stileproject blev hacket af en god hacker, men et
defacement
er for mig en scriptkiddie der blot vil have opmærksomhed ...

Vi sidder allesammen med problemet, at skulle patche servere i minus tid :-(

Henrik Lund Kramshøj
henrik.kramshoj@vigilante.com
Group Manager/Security Engineer
___________________
VIGILANTe - Assuring Internet Security
www.vigilante.com

Company Phone +45 7020 6565
Direct Phone +45 7731 6584
Mobile Phone +45 2026 6000

>>>> VIGILANTe.com NOTICE - AUTOMATICALLY INSERTED <<<<

The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential and/or privileged
material. Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by persons or
entities other than the intended recipient is prohibited.

Any opinions expressed in this email are those of the individual and not
necessarily the Company.

If you receive this transmission in error, please email to
postmaster@vigilante.com, including a copy of this message. Please then
delete this email and destroy any copies of it.

>>>>>>>>>>>>>>>>>>>>>>>>>> DISCLAIMER END <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

This archive was generated by hypermail 2b30 : Wed 15 Nov 2006 - 18:24:12 CET