Re: statd-exploit attack against RH 7.0

["Johan.Augustsson" <Johan.Augustsson () ADM GU SE>]

> > We got a few attacks from scriptkiddies running some statd.x against our
> > network and when I look at the messages in /var/log it looks different
> on a
> > Red Hat 6.2 and 7.0 The thing thats annoys me is that at the Red Hat 7.0
> > the timestamp for the attack has turned one hour backwards. Has anyone
> else
> > seen this?

<snip>

> Anyway, yes, there have been probe and attack attempts against the RPC
> statd process on several of my systems (I'm presuming a scan-style
> attack).

My question may not have been as clear as I wanted it to be.  :)
Have anyone else noticed a wrong timestamp in /var/log/messages on a Red
Hat 7.0 when hit by an statd.x?

/Johan