Re: ftp server compromised

Although I can't say much for the "I have disabled anonymous ftp" part.. I can however tell you that this common and known as pubbing in the warez comunity. This activity depicts scanning a range of IPs for FTPs that allow anon login.

This is, of course, assuming you have no services running that are easily exploitable. If you do, chances are greater that a root kit was used, which can be nasty depending on which one was used.

• Original Message ----- From: <rbelchez@show-net.net> To: <incidents@securityfocus.com> Sent: Wednesday, February 12, 2003 8:20 PM Subject: ftp server compromised

>
>
> Dear All,

--

> This list is provided by the SecurityFocus ARIS analyzer service.




----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: 
http://aris.securityfocus.com