Re: Rootshell pages hacked

["Richard Steenbergen" <humble () lightning net>]

> JR Mayberry wrote:
> > Supposedly sendmail 8.9.1 is to blame, not ssh.
> > http://www.sendmail.com/sendmail.8.9.1a.html
>
> MIME buffer overflows is *not* a sendmail problem. What made you say
> this?

I believe the sendmail 8.9.1 speculation comes from the fact that "thanks
for 8.9.1" is mentioned on the hacked page twice. Of course they claim they
were running qmail.

Despite the rampant speculation about ssh-1.2.26 being responsible, it still
seems preferable over ssh2 (which is LARGELY unfinished, and rivals even
ircd and win98 for the convoluted code of the year award).

On the more humorous side of things, It looks like someone at rootshell got
fired. http://adimage.blm.net/rootshell/cnjob.gif =)


--
Richard Steenbergen <humble () lightning net> Data Innovations System Admin
http://www.bitchx.com/~humble - humble@EFnet - PGP KeyID: 0x21581362
PGP Fingerprint: 7552 6AB2 B9C7 5A1B F1B6 8EA3 DFCF 793D 2158 1362
"Trespassers will be shot! Survivors will be shot again!"