[cobalt-users] bind hack

["J. Masterson" <masterson@xxxxxxxxxxxx>]

Hi, all. Been unsubscribed for a month or so; I'm back now.

Four Red Hat 6.1 machines (not cobalt boxes) that close friends of mine
administer were hacked over the weekend, root password compromised,
/bin/login replaced -- all will likely require a reinstall to be safe. 

It appears that the problem is with the version of Bind that accompanies
the OS... Red Hat recommends upgrading to 8.2.2 immediately. It looks
like my Raq3i has bind-8.2-6C1 installed.

Do a search for 'admrocks' at deja.com for the specific flavor of hack.

Any Cobalt reps comment on Raqs' vulnerabilty to this back door?




-- 
John Masterson
Web Developer
WAM!NET Missoula
masterson@xxxxxxxxxxxx