Re: brute force ssh attack

[Matthew Miller <mattdm mattdm org>]

On Wed, Apr 27, 2005 at 01:26:03PM +0200, Daniel Kirsten wrote:
> My question is:  They did not guess the root password, 
> how did they manipulate files which are only writable 
> by root???

Did you happen to have perl-suidperl installed?

<https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=146738>


-- 
Matthew Miller           mattdm mattdm org        <http://www.mattdm.org/>
Boston University Linux      ------>                <http://linux.bu.edu/>
Current office temperature: 80 degrees Fahrenheit.