Re: Rooted, .haos on system

From: zeno <bugtraq(at)cgisecurity.net>
Date: Mon Dec 16 2002 - 15:54:02 EST

> Left in the .bash_history was this:

Maybe you should email this dude. He wrote the exploit (or so the exploit says)

"su exploit by XP <xp@xtreme-power.com>
Enjoy!
"

Other neat stuff if you do a strings on the two filenames.

>
> I've already notified Geocities abuse, and haven't heard back from them

The domain name resolves to http://www.djteckh.com/ maybe worth checking out.  

> ----------------------------------------------------------------------------

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Mon Dec 16 16:29:12 2002