Security Incidents mailing list archives

BOGUS.IvCD File

From: jonz () NETRAIL NET (Jonathan A. Zdziarski)
Date: Wed, 26 Jan 2000 18:50:00 -0500


I'm really curious to know where this file came from.  I found it in /var/mail.  Does anyone know any program that uses 
this as a tempfile or could it have been a possible exploit attempt?

-rw-------   1 root          mail           0 Jan 17 11:45 BOGUS.IvCD

Thank you,

Jonathan A. Zdziarski
Director - MIS
NetRail, inc.
230 Peachtree St.
Suite 1700
Atlanta, GA 30303
404-522-5400 x240

Thank You,

Jonathan A. Zdziarski
Director of MIS
NetRail, inc.
230 Peachtree St.
Atlanta, GA 30303
888-NETRAIL x240

Current thread:

Re: ?, (continued)
- - - Re: ? Brock Sides (Jan 24)
    - Re: unapproved AXFR Russell Fulton (Jan 24)
    - No Idea CN (Jan 25)
    - PC Anywhere client seems to probe class C of connected networks Troy Ablan (Jan 25)
    - Re: PC Anywhere client seems to probe class C of connected networks Steve Ellermann (Jan 26)
    - Re: PC Anywhere client seems to probe class C of connected networks Paul L Schmehl (Jan 26)
    - Re: PC Anywhere client seems to probe class C of connected networks Jose Nazario (Jan 26)
    - Anti-Death Penalty Robert Graham (Jan 26)
    - Re: Anti-Death Penalty Derek Moeller (Jan 28)
    - Re: Anti-Death Penalty Robert Graham (Jan 28)
    - BOGUS.IvCD File Jonathan A. Zdziarski (Jan 26)
    - Re: BOGUS.IvCD File Vanja Hrustic (Jan 27)
    - Re: PC Anywhere client seems to probe class C of connected networks Robert Graham (Jan 26)
    - Probes to tcp 2766 ('System V Listner') Russell Fulton (Jan 26)
    - Re: No Idea Paul L Schmehl (Jan 25)
    - Re: No Idea Robert Graham (Jan 25)
    - Possible Probe = Possible Malfunction Ron Gula (Jan 25)
    - Possible attemt at hacking? Geir A. Bjune (Jan 25)
    - Re: Possible attemt at hacking? Brendan Grieve (Jan 27)
    - Re: ? Adam Boileau (Jan 25)
    - Korea (was RE: ?) Fernando Cardoso (Jan 26)

(Thread continues...)