[no subject]

2001-09-21 Thread Daniel Andrade
unsubscribe   [EMAIL PROTECTED]  

Re: New IIS worm

2001-09-21 Thread Vineet Kumar
* Johann Schwarzmeier ([EMAIL PROTECTED]) [010921 14:25]: > Hello, > > Hint: see wat iv'ed done: > > /etc/apache/srm.conf: > Alias /c/winnt/system32/cmd.exe /usr/lib/cgi-bin/block.cgi > Alias /d/winnt/system32/cmd.exe /usr/lib/cgi-bin/block.cgi > > The CGI: > > echo "You come from : ${REMOTE_A

Re: setuid changes

2001-09-21 Thread Ethan Benson
apt-get install sxid On Fri, Sep 21, 2001 at 10:22:29AM -0700, Micah Anderson wrote: > I was thinking it would be nice to see what sort of new setuid > programs show up on my box each day... then I noticed that these are > already being logged in /var/log/setuid.today and > /var/log/setuid.yesterd

No Subject

2001-09-21 Thread Daniel Andrade
unsubscribe   [EMAIL PROTECTED]  

Re: New IIS worm

2001-09-21 Thread Vineet Kumar
* Johann Schwarzmeier ([EMAIL PROTECTED]) [010921 14:25]: > Hello, > > Hint: see wat iv'ed done: > > /etc/apache/srm.conf: > Alias /c/winnt/system32/cmd.exe /usr/lib/cgi-bin/block.cgi > Alias /d/winnt/system32/cmd.exe /usr/lib/cgi-bin/block.cgi > > The CGI: > > echo "You come from : ${REMOTE_

Re: New IIS worm

2001-09-21 Thread Johann Schwarzmeier
Hello, Hint: see wat iv'ed done: /etc/apache/srm.conf: Alias /c/winnt/system32/cmd.exe /usr/lib/cgi-bin/block.cgi Alias /d/winnt/system32/cmd.exe /usr/lib/cgi-bin/block.cgi The CGI: echo "You come from : ${REMOTE_ADDR}" sudo ipchains -I wan-in -j DENY -l -s ${REMOTE_ADDR} sudo ipchains -I wan

Re: setuid changes

2001-09-21 Thread Ethan Benson
apt-get install sxid On Fri, Sep 21, 2001 at 10:22:29AM -0700, Micah Anderson wrote: > I was thinking it would be nice to see what sort of new setuid > programs show up on my box each day... then I noticed that these are > already being logged in /var/log/setuid.today and > /var/log/setuid.yester

Re: setuid changes

2001-09-21 Thread Vineet Kumar
* Micah Anderson ([EMAIL PROTECTED]) [010921 10:23]: > I was thinking it would be nice to see what sort of new setuid > programs show up on my box each day... then I noticed that these are > already being logged in /var/log/setuid.today and > /var/log/setuid.yesterday. What makes these? It appears

Re: New IIS worm

2001-09-21 Thread Johann Schwarzmeier
Hello, Hint: see wat iv'ed done: /etc/apache/srm.conf: Alias /c/winnt/system32/cmd.exe /usr/lib/cgi-bin/block.cgi Alias /d/winnt/system32/cmd.exe /usr/lib/cgi-bin/block.cgi The CGI: echo "You come from : ${REMOTE_ADDR}" sudo ipchains -I wan-in -j DENY -l -s ${REMOTE_ADDR} sudo ipchains -I wa

Re: setuid changes

2001-09-21 Thread Vineet Kumar
* Micah Anderson ([EMAIL PROTECTED]) [010921 10:23]: > I was thinking it would be nice to see what sort of new setuid > programs show up on my box each day... then I noticed that these are > already being logged in /var/log/setuid.today and > /var/log/setuid.yesterday. What makes these? It appears

setuid changes

2001-09-21 Thread Micah Anderson
I was thinking it would be nice to see what sort of new setuid programs show up on my box each day... then I noticed that these are already being logged in /var/log/setuid.today and /var/log/setuid.yesterday. What makes these? It appears they come from /etc/cron.daily/standard which runs /usr/sbin/

PERDITA EMAIL

2001-09-21 Thread sandr8
ciao a tutti! ho perso la mail [EMAIL PROTECTED] diffidate di qualsiasi messaggio che vi dovesse arrivare da tale indirizzo se vi dovesse arrivare un messaggio da tale indirizzo, siate così gentili da comunicarmelo: mi farete un grosso favore. se non mi conoscete vi chiedo scusa per il disturbo:

setuid changes

2001-09-21 Thread Micah Anderson
I was thinking it would be nice to see what sort of new setuid programs show up on my box each day... then I noticed that these are already being logged in /var/log/setuid.today and /var/log/setuid.yesterday. What makes these? It appears they come from /etc/cron.daily/standard which runs /usr/sbin

PERDITA EMAIL

2001-09-21 Thread sandr8
ciao a tutti! ho perso la mail [EMAIL PROTECTED] diffidate di qualsiasi messaggio che vi dovesse arrivare da tale indirizzo se vi dovesse arrivare un messaggio da tale indirizzo, siate così gentili da comunicarmelo: mi farete un grosso favore. se non mi conoscete vi chiedo scusa per il disturbo: