Subject: Re: http-gw exploit

From: Naresh Narang <[email-masked]>
Date: Thu, 12 Oct 2000 11:26:15 -0700 (PDT)

[To be removed from this list send the message "unsubscribe fwtk-users" in the
BODY of a mail message to [email-masked].]

Hi Jonathan:

You got exploited by your own misconfiguration.

NKN

--- "Jonathan B. Smith" <[email-masked]> wrote:
> This is a warning to all of you that are using
> http-gw packaged with the FWTK firewall.  I recently
> found that a hacker had gotten into my firewall and
> somehow used the http gateway to access the system. 
> The person(s) then changed the /etc/hosts.allow and
> /etc/hosts.deny files to allow access to themselves
> and deny access to all.  Please be aware of this. 
> It was a slip on my part to allow everyone access to
> the gateway.   If anyone else has the netperm-table
> allowing access to all, I strongly suggest that you
> change it.  
> 
> 
> Jonathan B. Smith
> Network Administrator
> Aston Office
> US² UNITED SUPPORT SYSTEMS
> [email-masked]
> 

=====
-- Naresh

__________________________________________________
Do You Yahoo!?
Get Yahoo! Mail - Free email you can access from anywhere!
http://mail.yahoo.com/