Re: Linuxconf scanning

[Jon Lewis <jlewis () LEWIS ORG>]

On Thu, 24 Aug 2000 lamont () icopyright com wrote:

> Somewhere out there is a response from the Linuxconf author that he
> couldn't get that exploit to work and doesn't believe any 6.x version was
> vulnerable.  I can't find the response in google though.

That the maintainer can't make published exploit code work doesn't mean a
whole lot.  That large numbers of script kids are scanning, sometimes just
for linuxconf, doesn't mean it's insecure, but it should worry you.

----------------------------------------------------------------------
 Jon Lewis *jlewis () lewis org*|  I route
 System Administrator        |  therefore you are
 Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________