RE: ftp

From: Kent Hundley (kent.hundleyat_private)
Date: Wed Apr 24 2002 - 13:59:01 PDT

  • Next message: Matt Zimmerman: "Re: ftp"

    There's also a pretty recent ftp vulnerability in Squid 2.4 STABLE3, which
    was announced late Feb/early March, which is about the time I also started
    seeing large numbers of scans for FTP.
    
    Regards,
    Kent
    
    -----Original Message-----
    From: Anton A. Chuvakin [mailto:antonat_private]
    Sent: Wednesday, April 24, 2002 9:40 AM
    To: gregory.kaneat_private
    Cc: incidentsat_private
    Subject: Re: ftp
    Importance: High
    
    
    Hello Greg and all,
    
    >Has anyone seen a recent increase in FTP attempts? I am getting hit all
    We have a huge increase of FTP scans on our honeynet (hundreds per day).
    They are likely produced by Linux Wu-FTPD autorooter (hits wu-ftpd up to
    2.6.1, e.g. Linux RedHat up to 7.2). The software ('autowu v1.0') default
    mode is to hit a B-class...
    
    Best regards,
    --
         Anton A. Chuvakin, Ph.D.
         http://www.chuvakin.org
       http://www.info-secure.org
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed Apr 24 2002 - 11:20:57 PDT