Your message dated Sun, 24 Apr 2005 17:02:14 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Bug#306069:
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 24 Apr 2005 00:35:05 +0000
>From [EMAIL PROTECTED] Sat Apr 23 17:35:05 2005
Return-path: <[EMAIL PROTECTED]>
Received: from smtp1.wanadoo.fr [193.252.22.30]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DPV5V-0008Io-00; Sat, 23 Apr 2005 17:35:05 -0700
Received: from me-wanadoo.net (unknown [127.0.0.1])
by mwinf0103.wanadoo.fr (SMTP Server) with ESMTP id ED30C1F92689
for <[EMAIL PROTECTED]>; Sun, 24 Apr 2005 02:34:33 +0200 (CEST)
Received: from wwinf0103 (wwinf0103 [172.22.132.30])
by mwinf0103.wanadoo.fr (SMTP Server) with ESMTP id E34101F92682
for <[EMAIL PROTECTED]>; Sun, 24 Apr 2005 02:34:33 +0200 (CEST)
X-ME-UUID: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
From: Loic JOUANIQUE <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject:
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [83.193.189.15]
X-WUM-FROM: |~|
X-WUM-TO: |~|
X-WUM-REPLYTO: |~|
Date: Sun, 24 Apr 2005 02:34:33 +0200 (CEST)
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-4.3 required=4.0 tests=BAYES_01,FROM_ENDS_IN_NUMS,
HAS_PACKAGE,NOSUBJECT autolearn=no
version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Package: etherape
Version: 0.9.0-9
Severity: POSSIBLE SYSTEM COMPROMISE !!!
System used : unstable, last updated 10 April 2005 ... gnome desktop ...
Problem: when etherape is active, there is a listening port : udp/32780 !!!
Upon googling, the only (seemingly) relevant thing is a blogging site,
all-around UTF-8 .. http://hx007.blogdriver.com ... speaking about
"server.32780-client.23"; since no other site speak about that, I guess one has
to investigate this ...
This is strange, and could indicate a possible compromise of this tool ...
---------------------------------------
Received: (at 306069-done) by bugs.debian.org; 24 Apr 2005 15:02:16 +0000
>From [EMAIL PROTECTED] Sun Apr 24 08:02:16 2005
Return-path: <[EMAIL PROTECTED]>
Received: from cytise.entrouvert.com (mail.entrouvert.be) [84.207.4.3]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DPici-0004fV-00; Sun, 24 Apr 2005 08:02:16 -0700
Received: from foscup.ulb.ac.be ([164.15.116.24] helo=trap)
by mail.entrouvert.be with asmtp (Exim)
(TLSv1:DES-CBC3-SHA:168)
id 1DPicg-0004kz-00; Sun, 24 Apr 2005 17:02:14 +0200
Received: from fred by trap with local (Exim 4.50)
id 1DPicg-0000hI-8S; Sun, 24 Apr 2005 17:02:14 +0200
Date: Sun, 24 Apr 2005 17:02:14 +0200
From: Frederic Peters <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: Bug#306069:
Message-ID: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[EMAIL PROTECTED]>
X-Operating-System: Debian GNU/Linux (3.1 with kernel Linux 2.6.11)
X-Uptime: 16:55:19 up 5:43, 6 users, load average: 0.43, 0.44, 0.67
User-Agent: Mutt/1.5.9i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Loic JOUANIQUE wrote:
> Package: etherape
> Version: 0.9.0-9
> Severity: POSSIBLE SYSTEM COMPROMISE !!!
>
> System used : unstable, last updated 10 April 2005 ... gnome desktop ...
> Problem: when etherape is active, there is a listening port : udp/32780 !!!
> Upon googling, the only (seemingly) relevant thing is a blogging site,
> all-around UTF-8 .. http://hx007.blogdriver.com ... speaking about
> "server.32780-client.23"; since no other site speak about that, I guess one
> has to investigate this ...
>
> This is strange, and could indicate a possible compromise of this tool ...
This is not strange; it is just used by etherape to make DNS requests.
Frederic
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
