[svlug] Re: Consider my mini-HOWTO

David Madison svlug.org at daveola.com
Sun Mar 18 22:15:02 PST 2001


> Fine, you've baited me. vitelus.com now runs the following code:
>   while true; do; nc -l -p 7777 | tar xzf -; done

If:

1)  This is true
2)  You do not have protection of this port over outsiders
3)  You are running this as a user with permission

Then you may likely have a file "/tmp/MADISON" on your system now.

If this is okay with you, fine.

If you run it as root, then it would be easy to erase your password file.

If one of the above is not true, then you should have added that
to your recommendation when you suggested using netcat - no reason
to suggest things to people that will get them in trouble.

-- 
Dave       GetDave.com




More information about the svlug mailing list