Re: [Full-Disclosure] Automated ssh scanning

[Tremaine <tremaine@xxxxxxxxx>]

On Thu, 26 Aug 2004 11:03:27 -0500, Todd Towles
<toddtowles@xxxxxxxxxxxxxxx> wrote:
> I agree, so we are looking at a unknown local exploit for woody or we
> are all missing something.

If nothing more useful has appeared on the list regarding this by the
weekend, I'll toss together a honeypot server myself and see what can
be dug up.  May just toss together a base linux system and run a few
different distros in vmware in their 'fully updated' configurations
according to vendor with a weak guest:guest account and a root
password/phrase from hell ;)

-- 
Tremaine
IT Security Consultant

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html