Re: brute force ssh attack

• To: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>
• Subject: Re: brute force ssh attack
• From: Jan Schaefer <jan_schaefer@xxxxxxxxxx>
• Date: Wed, 27 Apr 2005 13:44:57 +0200
• In-reply-to: <[email protected]>
• List-archive: <https://www.redhat.com/archives/fedora-list>
• List-help: <mailto:[email protected]?subject=help>
• List-id: For users of Fedora Core releases <fedora-list.redhat.com>
• List-post: <mailto:[email protected]>
• List-subscribe: <http://www.redhat.com/mailman/listinfo/fedora-list>, <mailto:[email protected]?subject=subscribe>
• List-unsubscribe: <http://www.redhat.com/mailman/listinfo/fedora-list>, <mailto:[email protected]?subject=unsubscribe>
• References: <[email protected]>
• Reply-to: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>

Hi,

> My question is:  They did not guess the root password, 
> how did they manipulate files which are only writable 
> by root???

The following articles at wikipedia should give you an idea what was
going on on your maschine:

http://en.wikipedia.org/wiki/Exploit_%28computer_security%29
http://en.wikipedia.org/wiki/Rootkit

Hope that helps,

Jan

P.S. I would recommend an clean re-install. You never know what things
are sleeping and hiding on your maschine now...
-- 
PGP: 2814 0DC4 597A 1083 9AA4 6F76 0DD9 54E1 B706 0963

• Follow-Ups:
  • Re: brute force ssh attack
    • From: Håkan Persson

• References:
  • brute force ssh attack
    • From: Daniel Kirsten

• Prev by Date: rpm and yum problems after fc2 to fc3 update
• Next by Date: Re: Yum -clean all........is that a bad thing?
• Previous by thread: brute force ssh attack
• Next by thread: Re: brute force ssh attack
• Index(es):
  • Date
  • Thread