-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sun, Sep 10, 2000 at 08:36:29AM -0700, [EMAIL PROTECTED] wrote:
> I'm getting these funny messages broadcast to all open shells on my > machine. [snip] > Message from [EMAIL PROTECTED] at Sat Sep 9 22:26:20 2000 ... > tarot > > Message from [EMAIL PROTECTED] at Sat Sep 9 22:27:12 2000 ... > tarot last message repeated 2 times It *may* be evidence of someone trying the rpc.statd buffer overflow (this based on my extrapolation from a mesage David Wright posted on Wednesday 6 September -- if I'm wrong, blame me, not him!) The subject was "Strange broadcast message from syslogd"; the mailing list archives should have more details. See http://www.debian.org/security/2000/20000719a for more information of the exploit. Best wishes, Terry Boon -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.1 (GNU/Linux) Comment: Processed by Mailcrypt 3.5.5 iD8DBQE5u7MbB+GG7A6DEUARAvf0AKClsPS5GCrcIKZBubxRuBap6f+06gCgpKNI HNnrOk6M+AAkBQWhQYBZvvE= =pe5w -----END PGP SIGNATURE-----
