Re: strange telnet behavior

From: tfmat_private
Date: Tue Feb 19 2002 - 10:19:50 PST

Next message: Clinton Smith: "UDP Scan port 53(dns) -> dst port <1024"

Previous message: H C: "NT/2K/XP Incident Response Training"
In reply to: Vladimir Ivaschenko: "strange telnet behavior"
Next in thread: Jamie Lawrence: "Solaris hack"
Reply: Jamie Lawrence: "Solaris hack"
Reply: Raistlin: "Re: strange telnet behavior"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi, see http://www.securityfocus.com/archive/75/249597

TfM

----- Original Message ----- 
From: "Vladimir Ivaschenko" <hazardat_private>
To: <incidentsat_private>
Sent: Monday, February 18, 2002 3:13 PM
Subject: strange telnet behavior


> Dear All,
> 
...
...
...
> open("/etc/ld.so.preload", O_RDONLY)    = 3
> [.. everything follows as usual ..]
> ioctl(0, TCGETS, {B38400 opost isig icanon echo ...}) = 0
> rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
> open("/etc/nsswitch.conf", O_RDONLY)    = 3
> Trying 10.10.10.3...
> Connected to 10.10.10.3.
> Escape character is '^]'.



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Clinton Smith: "UDP Scan port 53(dns) -> dst port <1024"
Previous message: H C: "NT/2K/XP Incident Response Training"
In reply to: Vladimir Ivaschenko: "strange telnet behavior"
Next in thread: Jamie Lawrence: "Solaris hack"
Reply: Jamie Lawrence: "Solaris hack"
Reply: Raistlin: "Re: strange telnet behavior"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Feb 20 2002 - 16:31:30 PST