brute force ssh attack

[William Hooper]

Matthew Miller wrote:
> On Thu, Apr 28, 2005 at 08:56:00AM -0400, William Hooper wrote:
>
>>>> Inexperienced sysadmins.
>>>>
>>> Sure. That is, "regular users of their own machines".
>>>
>> Nice job of completely quoting out of context, and completely missing
>> the point.
>
> I'm sorry -- I thought that *was* the point. Seriously, what more context
>  does one need here?

Well, the question asked would be nice:
"Thus it has some method of getting root privileges."

The response:
"Inexperienced sysadmins."

The quote showing that was the case:
"Daniel Kirsten wrote:
'Yesterday, I examined the directory ~daikanyama/.undernet and probably I
executed mech as root. The file mech is indeed infected by Linux/Rst-B.
This explains everything.......'

So the "method of getting root privileges" is "regular users of their own
machines" running random executables (like the ones downloaded by a script
kiddie) as root.

I'm interested in hearing how you would like to close this vulnerability.

--
William Hooper