Bugtraq mailing list archives

rootshell hacked via ssh-1.2.26

From: leitner () MATH FU-BERLIN DE (Felix von Leitner)
Date: Thu, 29 Oct 1998 00:14:58 +0100


On the rootshell home page, there is this notice:

   Rootshell Defaced
   10/28/98 8:44AM PDT On Wed Oct 28th at 5:12AM PST the main Rootshell
   page was defaced by a group of crackers. Entry to the machine was made
   via SSH (secure shell) which is an encrypted interface to the machine
   at 04:57AM PST this morning. Rootshell was first informed of this
   incident at 6:00 AM PST and the site was immediately brought offline.
   The site was back up and operational by 8:00AM PST.

They also mention that they used ssh-1.2.26 (the current version) and
their port 22 is not blocked (presumably firewalled away).

Does anyone have any further info?  This should probably leave a _lot_ of
us quite restless tonight...

Felix

Current thread:

Firewall-1 Security Advisory Diligence Risks (Oct 24)
- <Possible follow-ups>
- Re: Firewall-1 Security Advisory Paul Sears (Oct 26)
- Re: Firewall-1 Security Advisory Mnemonix (Oct 27)
  - Sendmail, lynx, Netscape, sshd, Linux kernel (twice) Michal Zalewski (Sep 05)
    - Re: Sendmail, lynx, Netscape, sshd, Linux kernel (twice) Nick Andrew (Oct 28)
    - Re: Sendmail, lynx, Netscape, sshd, Linux kernel (twice) brian j. pardy (Oct 28)
    - [L0pht Advisory] MacOS - FWB passwords easily bypassed Space Rogue (Oct 30)
  - Re: Firewall-1 Security Advisory John Horn (Oct 28)
  - rootshell hacked via ssh-1.2.26 Felix von Leitner (Oct 28)
- Re: Firewall-1 Security Advisory David S. Goldberg (Oct 27)
  - Re: Firewall-1 Security Advisory Gary Gaskell (Oct 27)
    - Re: Firewall-1 Security Advisory Ejovi Nuwere (Oct 29)
    - Summary of Printer Sharing and M1CR0S0FT Windows98 Paul Leach (Oct 29)
    - Re: Firewall-1 Security Advisory Jason Costomiris (Oct 30)
  - Firewall-1 insecurity. Darren Reed (Oct 29)
  - Bug in Solaris 2.6 ??? Daniel Ezekiel (Oct 29)
  - WatchGuard Firewall internal D.O.S Who Wants To Live Forever ... (Oct 29)
- Re: Firewall-1 Security Advisory Larry Pingree (Oct 27)
- Re: Firewall-1 Security Advisory Simon Finn (Oct 29)

(Thread continues...)