Full Disclosure mailing list archives

quit the dumd chat man!!


From: "Ferris, Robin" <R.Ferris () napier ac uk>
Date: Thu, 21 Aug 2003 17:07:49 +0100

we had a honey pot hit by some canny FTP kiddies using the RPC flaw to load
up an FTP server that ran as a service and also then execute a predifned
further attack on some specific IP's any one else seen this. very similar
exploit to nachia "whatever its called" worm
 
the attack came from two uni's one in Holland and one in germany.
 
The user name for the ftp server they set up was fast and pword was fill!!
haxor humor no doubt!
 
Anyone seen anything like this too.
 
RF

Current thread: