full-disclosure - Automated SSH login attempts? Related Cross post from incidents.org

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [<thread-prev] [month] [year] [list]

From: jikos at jikos.cz (Jirka Kosina)
Subject: Automated SSH login attempts? Related Cross
 post from incidents.org

On Fri, 30 Jul 2004, Harris, Michael C. wrote:

> We got zapped by some hackers from, I think, Romania that have a priv
> escalation exploit for Linux 2.4.20
> http://sirzion.illusivecreations.com/loginxy

This exploit really shouldn't be dangerous for any admin updating at least 
once a year <g> - it is just a scriptkiddie exploit for old do_brk() 
bounds check vulnerability.

-- 
JiKos.