:>I'm getting unnerved by the fact that not only
:>have those sites indeed been hacked, but noone
:>seems to be surpised.
:>
:>What techniques were used? To alter the html
:>files, someone obviously managed to achieve
:>file overwrite rights (at the very least).
:
:You'd be surprised at how many NCSA httpd sites are
:still out there which are vulnerable to the attack:
[more about the phf bug]
There's no reason to believe that the compromise to www.af.mil occured
through any weakness in the WWW server software/machine in particular. I
just did some cursory checking -- "server.af.mil" is running sendmail
5.59(!) and "ddn.af.mil" is running NFS (no exports list, perhaps a
default portmap though). And it could always be an inside job...
...Mike
--
Michael J. O'Connor mjo @
dojo .
mi .
org
"...and life begins at 40 -- so they promise" -John Lennon
References:
|
|
