|
|
Re: lug-bg: samba i udp port 45295
- Subject: Re: lug-bg: samba i udp port 45295
- From: Kamen Sharlandjiev <stone@xxxxxxxxx>
- Date: Wed, 10 Sep 2003 09:35:36 +0300
- Organization: NetBG Ltd.
Zdraveyte i ot mene...
Iskam da probvash neshto... sled kato se telnetish na mashinkata na tozi port
napishi prosto:
whoami; --> ; sa vajni sled command-a ... namerisva mi na 1 mnogo star
backdoor (bindshell) dori i ne e password protected koeto e oshte po
kofti... ako se okaja prav i command "whoami;" i vsiakakvi drugi ti vrushtat
result (a sum 99.9%) siguren 4e e taka... sledvashtia put kato teglish razni
packets sravniavai i md5-to :), spasenieto e kill -9 smbd ... nai veroiatno
ako men pitash sa te capnali i sa ti iztrili smbd file-a na negovo miasto sa
slojili backdoor-a. ako "whoami;" ti vurne 4e e root (zna4e backdoor-a e
pusnat kato root) togava te suvetvam reinstall na mashinkata....
ako e primerno user nobody ... si pregledai apache/SSL/ cgi-ki razni ... cros
scriptings ... Uspeh.
--
Regards, Kamen Sharlandjiev
System Administrator
NetBG Communication
ICQ: 50729493
GSM: +359 2 9624352
On Tuesday 09 September 2003 20:58, higeronimo@xxxxxxxxx wrote:
> Stava neshto mnogo stranno. Pusnal sam samba
> Version 2.2.8 i zabeliazvam che otvaria udp port 45295
> sled izvestno vreme. Telnetvam se kam nego i pisha
> neshto si i mi dava:
>
> /bin/sh: command not found !!!
>
> Niakoi shte mi dade li informacia kakvo stava. Da
> niama niakakav exploit za koito ne znam ! Vse pak tova
> e poslednia release ...
>
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
> ===========================================================================
>= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
> http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara
> Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
> ===========================================================================
>=
============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================
|
|
|