Re: ADMROCKS attack in progress!

2000-02-21 Thread Hossein S. Zadeh
On Mon, 21 Feb 2000, Jason Hirsch wrote: > Awhile back someone (with an email @redhat.com) asked in (what i thought > was) seriousness about a 'service pack' style fix. I read this post and > think "Wow. To think that for NT all I have to do is run 1 program and > all the bugs are fixed". Yes,

Re: ADMROCKS attack in progress!

2000-02-21 Thread Wayne Dyer
On Mon, 21 Feb 2000 12:23:51 Jacques Gelinas wrote: [...] > You are missing something important. If you only apply the NT service > pack, then you lack the hotfixes. Applying only service pack is equivalent > to keep up to date with redhat releases. RedHat do something like 2 > releases a year (6.

Re: ADMROCKS attack in progress!

2000-02-21 Thread hUnTeR
Marie Bennington wrote: > > What about the GnoRPM? With the webfind feature, I think it's the > easiest wat to find the updates you need? Or is that the part about > "pawing through a checklist of 100's?" And what is this autorpm you > speak of? I am not familiar with it, but am eager to learn.

Re: ADMROCKS attack in progress!

2000-02-21 Thread Halcyon
I was hit by this exploit last week, and after searching deja.com I read that even the update for bind on the errata page is vulnerable. You must update to P5 on rawhide.redhat.com to be safe. -Halcyon On Sun, 20 Feb 2000, M. Erickson wrote: > where can I get more info on this rootkit and how

Re: ADMROCKS attack in progress!

2000-02-21 Thread Jacques Gelinas
On Mon, 21 Feb 2000, Jason Hirsch wrote: > Not to push an issue- > > Awhile back someone (with an email @redhat.com) asked in (what i thought > was) seriousness about a 'service pack' style fix. I read this post and > think "Wow. To think that for NT all I have to do is run 1 program and > all

Re: ADMROCKS attack in progress!

2000-02-21 Thread Marie Bennington
"Michael H. Warfield" wrote: > > Why not just use autorpm then? If that's what you want to do, then > just setup autorpm to point at the updates site, run it nightly, and > configure it to automatically update all the packages you already have > installed. You don't have to paw "down a

Re: ADMROCKS attack in progress!

2000-02-21 Thread Michael H. Warfield
On Mon, Feb 21, 2000 at 09:14:53AM -0500, Jason Hirsch wrote: > On Mon, 21 Feb 2000, Michael H. Warfield wrote: > > On Sun, Feb 20, 2000 at 10:23:28PM -0800, M. Erickson wrote: > > > where can I get more info on this rootkit and how to defend against it? > > > some fsck is taking down a couple o

Re: ADMROCKS attack in progress!

2000-02-21 Thread Eric Sisler
Jason Hirsch <[EMAIL PROTECTED]> wrote: >Not to push an issue- > >Awhile back someone (with an email @redhat.com) asked in (what i thought >was) seriousness about a 'service pack' style fix. I read this post and >think "Wow. To think that for NT all I have to do is run 1 program and >all the bu

Re: ADMROCKS attack in progress!

2000-02-21 Thread lloy0076
Jason! > My firewall is kept up to date, but the machines on the inside? Not worth > the effort to update stuff that I may or may not use. I think that is an excellent idea. RedHat could have an RPM style files where all you did was mount /mnt/cdrom; rpm -Uvh /mnt/cdrom/*.rpm AND a SRPMS style

Re: ADMROCKS attack in progress!

2000-02-21 Thread Jason Hirsch
On Mon, 21 Feb 2000, Michael H. Warfield wrote: > On Sun, Feb 20, 2000 at 10:23:28PM -0800, M. Erickson wrote: > > where can I get more info on this rootkit and how to defend against it? > > some fsck is taking down a couple of my friends' boxes. > > /me > > ADMROCKS is an attack against

Re: ADMROCKS attack in progress!

2000-02-21 Thread Michael H. Warfield
On Sun, Feb 20, 2000 at 10:23:28PM -0800, M. Erickson wrote: > where can I get more info on this rootkit and how to defend against it? > some fsck is taking down a couple of my friends' boxes. > /me ADMROCKS is an attack against name daemons which are not up to date. Like lots of other s

Re: ADMROCKS attack in progress!

2000-02-21 Thread Frederic Herman
http://www.cert.org/current/current_activity.html#bind "M. Erickson" wrote: > > where can I get more info on this rootkit and how to defend against it? > some fsck is taking down a couple of my friends' boxes. > /me > > Mike Ericks

ADMROCKS attack in progress!

2000-02-20 Thread M. Erickson
where can I get more info on this rootkit and how to defend against it? some fsck is taking down a couple of my friends' boxes. /me Mike Erickson <[EMAIL PROTECTED]> http://www.fix.net/~merickson/ "The world is my country and my reli