Re: [cobalt-security] RAQ3 & RAQ4 Hacked...

[Paul Jacobs <paul@xxxxxxxxxxxxxxxxxx>]

At 07:01 PM 3/31/2002, you wrote:
> On Sunday 31 March 2002 07:46 pm, Ben Koshy wrote:
> > Update: Turns out we isolated it to a newly activated NFS Daemon on that
> > box.  Anyone know of vunrenbilities on the NFS Daemon there?  Are there
> > patches or security that can be applied?
> >
>
> You shouldn't be running NFS accessable to the Internet.
> It is usually run on an protceted internal private network
> --
> Gerald Waugh : Registered Linux user # 255245
> http://www.frontstreetnetworks.com
> New Haven, CT, United States of America
> 9:59pm up 10 days, 6:24, 2 users, load average: 1.25, 1.32, 1.52

Yep, but NFS is not very secure to start with..



> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security

Paul Jacobs /Senior Network Eng.
Yourwebcentral.com
"Host ANY website "
http://www.yourwebcentral.com
mailto:paul@xxxxxxxxxxxxxxxxxx