[NTLUG:Discuss] SRJ servers hacked and destroyed!

[Jason Fortezzo]

At 03:37 PM 7/8/2000, you wrote:
 >The hackers scanned ports, entered in with FTP and telnet by utilizing
 >AdmRocks to overflow the Named buffer. I was running Bind 8.2.1 - I strongly
 >encourage anyone who is running bind to upgrade to bind 8.2.2 Patch 5
 >
 >The folks who hacked me are called the "Shitkingz" they replaced the
 >index.html file for each users public_html directory with their own which
 >included child pornography images pulled from  a geocities account

You run telnet, ftp, named, and apache on the *same* server?  From what
you have said, it looks like you were asking to be attacked.

As for the word "hackers" most of us prefer you use the term "crackers".

To keep up with the latest vulerabilities, I subscribe to Security Focus News
which gives a weekly summary of happenings on Bugtraq.  You can find
more information @ http://www.securityfocus.com/forums/sf-news/faq.html.



Jason Fortezzo
fortezzo at directlink.net
http://galvani.tamu.edu/~bigjason/pgpkey
---
If you have any trouble sounding condescending,
find a Unix user to show you how it's done.
                     --Scott Adams