From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id ; Mon, 13 Aug 2001 15:49:56 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id ; Mon, 13 Aug 2001 15:49:46 -0400 Received: from mail-klh.telecentrum.de ([213.69.31.130]:61960 "EHLO mail-klh.telecentrum.de") by vger.kernel.org with ESMTP id ; Mon, 13 Aug 2001 15:49:37 -0400 Message-ID: <3B782F19.53010F57@topit.de> Date: Mon, 13 Aug 2001 21:48:41 +0200 From: Ronald Jeninga Reply-To: rj@topit.de X-Mailer: Mozilla 4.77 [en] (X11; U; Linux 2.2.19 i686) X-Accept-Language: en MIME-Version: 1.0 To: Mircea Ciocan CC: Linux Kernel List Subject: Re: Is there something that can be done against this ??? In-Reply-To: <3B7822E5.9AE35D4A@interplus.ro> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org I'll have to dissapoint you, worked perfect over here (Kernel 2.2.19, ld version 2.9.5 (with BFD 2.9.5.0.24), libc-2.1.3-141). feeling uncomfortable, Ronald Mircea Ciocan wrote: > > The attached piece of script kiddie shit is the first one that worked > flawlessly on my Mandrake box :((( ( kernel 2.4.7ac2, glibc-2.2.3 ), > instant root access !!!. > I was stunned, and it seem that is the beginning of a Linux Code Red > lookalike worm :(((( using that exploit, probably this is not the most > apropriate place to send this, but I'm not subscribed to the glibc > mailing list and I just hope that some glibc hackers are on linux kernel > list also and they see that and do something before we join the ranks of > M$. > > Dead worried, > > Mircea C. > > P.S. Please tell me that I'm just being parnoid and that crap didn't > work on your systems with a lookalike configuration. > > -------------------------------------------------------------------------------- > Name: smile.sh > smile.sh Type: Bourne Shell Program (application/x-sh) > Encoding: quoted-printable