full-disclosure - Whois acting funny in FreeBSD

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: mbassett at omaha.com (Bassett, Mark)
Subject: Whois acting funny in FreeBSD

Ps obviously they are pointing wanting you to visit
http://www.gulli.com/

which is some german (?) hack/crack/serial and news site.

Mark Bassett
Network Administrator
World media company
Omaha.com
402-898-2079

-----Original Message-----
From: Chris McGinnis [mailto:chrism@...ireless.com] 
Sent: Tuesday, December 30, 2003 12:43 PM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] Whois acting funny in FreeBSD

Today I've noticed something weird on all my FreeBSD boxes.  When I
whois 
domains like msn.com, microsoft.com, aol.com and others I get stuff
like:

$ whois msn.com

Whois Server Version 1.3

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

MSN.COM.TW
MSN.COM.SUCKS.FIND.CRACKZ.WITH.SEARCH.GULLI.COM
MSN.COM

My linux boxes seem to work fine.  When I query a specific whois server 
such as whois.networksolutions.com it works fine also.  Is anyone else 
getting anything like this?  I'm thinking maybe the default whois server

that the whois program queries has been compromised?  I'm not sure what
the 
default whois server is.

-Chris

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

************************************************************
Omaha World-Herald Company computer systems are for business use only.
This e-mail was scanned by MailSweeper
************************************************************