I've been getting the same errors too. We also have script kiddies going at
our machines, but there's no way to tell if the two are related. I'm not
getting hundreds of these messages though, just one or two per day.
Bind did have a known overflow exploit a little while ago - I suspect this
is
Interestingly, I've been seeing that on many servers we operate.
We run unstable though...
Sometimes we get hundreds of those messages, with exactly the same problems
you experienced.
We always thought some script-kiddie was trying to find some buffer overflow
shxt on us. Is it?
Jason Lim
-
On Fri, 26 Jan 2001, John Gonzalez/netMDC admin wrote:
> The worm is called RAMEN, search for it and it might turn up some
> info. I'm not sure what the worm does or how it works
Anyone at all worried (or just plain curious) about the Redhat
specific ramen worm should go look at:
http://www.l
- Forwarded message from "John F. Davis" <[EMAIL PROTECTED]> -
Date: Thu, 25 Jan 2001 15:13:37 -0500
From: "John F. Davis" <[EMAIL PROTECTED]>
To: debian user mailing list <[EMAIL PROTECTED]>
Subject: how to configure a socks client?
User-Agent: Mutt/1.0.1i
Hello
I am behind a socks fir
John Gonzalez/netMDC admin wrote:
>
> The worm is called RAMEN, search for it and it might turn up some
> info. I'm not sure what the worm does or how it works... but at least it
> will help if you search for the right worm :)
Yes, you're right I mispelled the name :-)
Everything look to be on it
The worm is called RAMEN, search for it and it might turn up some
info. I'm not sure what the worm does or how it works... but at least it
will help if you search for the right worm :)
On Fri, 26 Jan 2001, Marek L. Kozak wrote:
| Some told me it might be e worm called Raven, but it attacks some
Hello,
I found this in my syslog today:
Jan 26 01:39:38 myhost
Jan 26 01:39:38 myhost /sbin/rpc.statd[156]: gethostbyname error for
^X÷˙ż^X÷˙ż^Y÷˙ż^Y÷˙ż^Z÷˙ż^Z÷˙ż^[÷˙ż^[÷˙ż%8x%8x%8x%8x%8x%8x%8x%8x%8x%236x%n%137x%n%10x%n%192x%n\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\22
Hello,
On Fri, Jan 26, 2001 at 02:06:33AM -0800, Bryan Kroll wrote:
> I recently got ADSL and I tried to run a server, well,
> I tried many servers but no one else can access it.
> Because either my ISP has a firewall or I don't have a
> real IP. Its dynamic and thats another problem but if
> I c
I recently got ADSL and I tried to run a server, well,
I tried many servers but no one else can access it.
Because either my ISP has a firewall or I don't have a
real IP. Its dynamic and thats another problem but if
I can get others to access my server then I will be
satisfied. As far as my changi
9 matches
Mail list logo
