Just wondering..

[sSwiNg]

I like almost certain that both your port 22: SSH
and your 80: HTTPD are vuln

Most likely your running Redhat 7.3, not sure tough

I'm just wondering if you have updated this shit recently?

Be sure to check your Bind (53)

[x] avrilstar.com is running: Apache/1.3.22 (Unix) (Red-Hat/Linux) mod_jk/1.2.0 mod_perl/1.24_01 PHP/4.1.1 FrontPage/5.0.2 mod_ssl/2.8.5 OpenSSL/0.9.6b

In the time I was l33t, this was exploitable :)

and so was SSH-1.99 OpenSSH_3.1p1

If you have Redhat..
Check your whole sys or just run the little program called up2date
(believe /usr/sbin/up2date) I hate Redhat, why do you use it?:D

http://www.redhat.com/apps/support/errata/



Last edited by sSwiNg at Oct 27 2002, 09:01 PM

[Drew]

Whoa.. thats pretty hardcore stuff even for me..

I don't manage the server, I'm simply hosted on my friend's server (ie I don't have direct access to the server, just to my acocunt).. the only modification i requested recently was to get rid of the damned frontpage extensions

I'm gonna forward this info to my friend.. thanks :)

[sSwiNg]

:)

No prob