Security Incidents mailing list archives
Re: unusual mail file
From: ryan () VOTE-SMART ORG (Ryan Hilton)
Date: Tue, 28 Mar 2000 15:37:53 -0800
It should only be a fingerprint of one if A) your mail program/server was actually exploited or B) It was performed from the local machine. It could also possibly an account created as a result. Check your security.
The following file was found on a mail server.
-rw-rw-rw- 1 1048576 1048576 0 Mar 6 14:09 vUnLKeYFn
It looks awfully suspicious. I'm wondering if this is a fingerprint
of a scanning tool that looked for (and looks like it found) a hole
in a mail program.
Thanks,
Don
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com
Ryan Hilton Computer Help Desk Project Vote Smart
Current thread:
- Re: Cracked by the Brazilians, (continued)
- Re: Cracked by the Brazilians Ralf Spenneberg (Mar 30)
- Re: Cracked by the Brazilians Seth Milder (Mar 30)
- link-local IPs (Was "Re: 169.254.x.x (Dramatic increase in UDP Port 137 (NetBIOS Name Service) probe activity)") Richard Johnson (Mar 30)
- unapproved queries for "aol.com" Francis A. Vidal (Mar 26)
- Linux-box hacked, ls, ps, login modified Frank Derichsweiler (Mar 22)
- Re: Linux-box hacked, ls, ps, login modified Rick Tait (Mar 22)
- Re: Linux-box hacked, ls, ps, login modified Granquist, Lamont (Mar 24)
- 'fatal:' sshd log message Przemyslaw Frasunek (Mar 25)
- sgi-dgl scanning Michael Stone (Mar 27)
- unusual mail file Donald McLachlan (Mar 28)
- Re: unusual mail file Ryan Hilton (Mar 28)
- Front Page Extensions vventura () SIA PT (Mar 28)
- Re: sgi-dgl scanning E. Larry Lidz (Mar 28)
- Syn attacks ? Klavs Klavsen (Mar 28)
- Re: lots of interest in port 109 (POP2) markus tromday (Mar 22)
- Re: lots of interest in port 109 (POP2) Paul Rice (Mar 13)
- Munged Napster Sessions Stephen P. Berry (Mar 13)
- Looking for Squid Proxies Cy Schubert - ITSD Open Systems Group (Mar 16)
- Re: Munged Napster Sessions Vanja Hrustic (Mar 16)
- Port 6112 Stuart Staniford-Chen (Mar 17)