That was the first thing I thought of... They were on the same network
all right, but they were servers and some of the only machines which
didn't have ssh keys etc setup, afaik anyway.
> Was the first box on the same network and did it contain any passwords?
>
On Wed, Aug 04, 2004 at 09:31:58PM +0100, Ken Gilmour wrote:
> On Wed, 4 Aug 2004 21:09:02 +0100, Eoin Ryan wrote:
> > The second box that was hacked was a gateway machine to a private
> > network and the *only* listening port was ssh!
> >
> > When I saw the first machine initially, I was convinced it was a
> > apache/php problem... until I found the second machine was
> > compromised.
> >
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
