Re: Port 109 Scans

[ident () LINEONE NET (Stone)]

Hi

There is a commonly known exploit for pop2 server that gives
root priviledges, this is the reason for the increase in recent pop2
port scanning.

Hope that helps, Chris.

----- Original Message -----
From: "Eric Maiwald" <emaiwald () FRED NET>
To: <INCIDENTS () SECURITYFOCUS COM>
Sent: Thursday, May 04, 2000 2:14 PM
Subject: Port 109 Scans

> We are seeing a large number of scans to port 109 (POP2).  I posted
> a question on this about a month ago and no one had any good ideas
> what the scanners were looking for.
>
> Anyone have any better ideas?  Is there something new in POP2 or
> are these individuals just looking for old systems?
>
> Eric
>
> ---------------------------------------------------------------------
> Eric Maiwald                                        emaiwald () fred net
> So Many Hobbies, So little time
> ---------------------------------------------------------------------