[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] RaQ2 Hacked within 1 day of being online



From: "Gareth" <garth@xxxxxxxxxxxxxxx>

> I would suggest a sniffer or a script kiddie, it is the holiday season.
You
> can download many exploits directly, and they will detect the type of box
> and automatically adjust their exploit.

This is possible, but unlikely for a MIPS cpu. Besides, the user had the
latest patches installed.

>Your suggestion that the type of
> architecture could be the only thing that stops it from running, maybe the
> file was compiled for a different kernel version rather than architecture
> type?

Also possible, but wouldn't the error message have been different? Besides,
with most hacks, the trojans are compiled on the host machine to avoid the
above problem.

Kevin