got r00t?

gav on 2003-04-30T21:03:13

This week a client's machine we host (they maintain) got hacked with a rootkit. It's important to keep up with patches if you connect your box to the internet, it's not enough to have a firewall as that won't do you any good if a publicly accessible service (in this case sendmail) has a vulnerability.

Note to self, I should really get tripwire installed on my boxes, we were lucky that the hacker decided to delete the log files causing the log rotation script to die and alert us. I decided that it would be a good opportunity to change my password on half a dozen boxes, it was getting a bit old, so I'm sure I'll have fun for the next week getting it wrong.

One of our clients, Anna's Linens have launched their site this week. Very low prices, but the Black Satin Sheets are what's tempting me.


The Deuce you say!

schwern on 2003-05-05T19:39:50

Shocked! Yes, I am shocked to find that sendmail is open to root exploits. ;)