RE: [Samba] Huh... 2.2.8 exploit?!

2003-07-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 30 Jun 2003, Vizitiu, Ciprian wrote: > Jun 30 16:17:39 server smbd[28856]: [2003/06/30 16:17:39, 0] > lib/fault.c:fault_report(38) > Jun 30 16:17:39 server smbd[28856]: > === > Jun

RE: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Vizitiu, Ciprian
Le lun 30/06/2003 à 08:38, Rashkae a écrit : > For that matter, why would smbd (but not the system logs) be deleted in > the first place? on which FS type on does smbd reside ? ext3. But it served files from a [Homes] on a ReiserFS -- To unsubscribe from this list go to the following URL and read

RE: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread David Morel
Le lun 30/06/2003 à 08:38, Rashkae a écrit : > For that matter, why would smbd (but not the system logs) be deleted in > the first place? on which FS type on does smbd reside ? > > Jun 30 2:37am > > > They hang the man and flog the woman > That stea

RE: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Rashkae
For that matter, why would smbd (but not the system logs) be deleted in the first place? Jun 30 2:37am They hang the man and flog the woman That steal the goose from off the common, But let the greater villain loose That steals the common from the go

RE: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Vizitiu, Ciprian
> > Signal 11, mmm, that could be a memory error(hardware). > > Is the hardware certified? (www.memtest86.com) > :-D ... Well it's a IBM e-server. No, I didn't change the original memory modules. > If it was a hardware error; why would be smbd deleted? Good question. -- To unsubscribe from

Re: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Nejc Skoberne
Hi. > Signal 11, mmm, that could be a memory error(hardware). > Is the hardware certified? (www.memtest86.com) If it was a hardware error; why would be smbd deleted? -- Nejc Skoberne Grajska 5 SI-5220 Tolmin E-mail: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL an

Re: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Oliver Schulze L.
Signal 11, mmm, that could be a memory error(hardware). Is the hardware certified? (www.memtest86.com) HTH Oliver Vizitiu, Ciprian wrote: Are you really shure, that the computer was breaked through samba, you can be sure only if just the samba ports (137,138,139,445) was opened to the Internet

RE: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Vizitiu, Ciprian
> Are you really shure, that the computer was breaked through > samba, you > can be sure only if just the samba ports (137,138,139,445) > was opened to > the Internet?! Yes, totally agree with you. Maybe my message was... No, for sure my message was badly formulated. I had a RH8 machine with q

Re: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Gémes Géza
Vizitiu, Ciprian írta: ... By my mistake a 2.2.8a-1 running on RH8 was exposed to the Internet. It was cracked in a matter of hours. I noticed it because they've deleted my smbd. :-| I'm ready to reinstall the machine, if there are any logs that anybody is interested into please say it now.

Re: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Jeremy Allison
On Mon, Jun 30, 2003 at 06:08:02PM +0200, Vizitiu, Ciprian wrote: > > ... By my mistake a 2.2.8a-1 running on RH8 was exposed to the Internet. It > was cracked in a matter of hours. I noticed it because they've deleted my > smbd. :-| > > I'm ready to reinstall the machine, if there are any logs

Re: [Samba] Huh... 2.2.8 exploit?!

2003-06-30 Thread Nejc Skoberne
Hi. > ... By my mistake a 2.2.8a-1 running on RH8 was exposed to the Internet. It > was cracked in a matter of hours. I noticed it because they've deleted my > smbd. :-| 2.2.8a cracked? Isn't this supposed to be the most stable release? > I'm ready to reinstall the machine, if there are any log