Security Incidents mailing list archives

Re: nouser - rootkit ?


From: Jose Nazario <jose () biocserver BIOC cwru edu>
Date: Tue, 12 Mar 2002 16:54:55 -0500 (EST)

On Tue, 12 Mar 2002, Kyle R Maxwell wrote:

Obscure though it may be, a rootkit might have been written for IRIX
either due to intentional targeting of a particular organization, or
with the realization that IRIX deployments are typically fairly
powerful installations, not your run-of-the-mill ISP (this includes
folks like NASA, etc.) There have even been a few major websites that
ran on IRIX for a good amount of time.

more common, for the hacker, are .edu installs of irix. lots of
researchers use irix. lots of those researchers are not so saavy with the
unix, even less so with the security end of it (not that irix is easy to
secure)

____________________________
jose nazario                                                 jose () cwru edu
                     PGP: 89 B0 81 DA 5B FD 7E 00  99 C3 B2 CD 48 A0 07 80
                                       PGP key ID 0xFD37F4E5 (pgp.mit.edu)


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: