Re: Madereet exploit

From: Martin Markgraf (mm@RIEN-AG.DE)
Date: Wed Apr 18 2001 - 08:22:25 PDT

  • Next message: w1re p4ir: "31337 udp, on cisco...?"

    Hello,
    
    Daniel Brachmann wrote:
    
    [..]
    > >  The "sauber" utility was quite interesting, it cleans the system
    > >  logfiles giving the following output:
    > >
    > >  * sauber by socked [07.27.97]
    > >  *
    > [ Output shortened]
    > >  * Alles sauber mein Meister !'Q%&@
    >
    > sauber is a german word meaning clean and the last sentence of the
    > output would translate into something like "Everything clean my
    > master".
    >
    > It seems that whoever cracked ur box is of german origin
    
    Not really. It only indicates that the autor of "sauber" most likely is
    a german speaking person. "sauber" by itself is a very common tool
    in recent rootkits.
    
    regards,
      Martin
    
    --
    Martin Markgraf
    Rien Informationssysteme AG                         fon: +49 2841 9083061
    Eurotec-Ring 15                                     fax: +49 2841 9083069
    D-47445 Moers            http://www.rien-ag.de          mm@rien-ag.de
    



    This archive was generated by hypermail 2b30 : Wed Apr 18 2001 - 09:25:41 PDT