Re: [cobalt-users] Any known Raq 3/4 Exploits

["Glenn Knox" <glenn@xxxxxxxxxxxxx>]

Just went through this myself.

I ended up replacing the RAQ4 with a spare (which I had restored and 
put all available patches on in my lab).

I now require my clients to use Frontpage to update their sites, and I 
only enable the FTP and Telnet servers when I need them.

Of course, this issue is not RAQ specific.

Yep, I'm paranoid now... 

> Hello,
> 
> We have 2 RaQ 3Is and 2 RaQ4Is. All four have been rooted and 
exploited as 
> well as some defacing in the last 48 hours. We use 3 for hosting and 
1 
> Raq3I for bandwidth Throttling using a 3rd party software.....
> 
> All have current updates installed. Old version of SSH 1.2.7 has now 
been 
> replaced with SSH 3.0.2.
> 
> 
> Any thoughts or help on trying to prevent would be appreciated.
> 
> Thx
> 
> ChriS
> 
> 
> |    chris@xxxxxxxxxxxx    		        Tel:(613)547-6939    |
> |    Come visit us at 182 Wellington Street in Downtown Kingston!    |
> |  InterNet Kingston: Chamber of Commerce Business of the Year 1998  |
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
> 
> 

Thanks,

Glenn