OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1994: Re: CERT Advisory - wuarchive ftpd Trojan Horse

Re: CERT Advisory - wuarchive ftpd Trojan Horse

Alastair Young (alastaircadence.com)
Wed, 6 Apr 1994 12:28:17 -0800 

At  1:56 PM 4/6/94 -0400, Christopher Klaus wrote:
>> 
>Yikes.  Here is something you might want to take fast action against.
>
>I wish CERT would have posted more details though.
>like how the trojan worked or where it was or what sites
>contained copy of it.  how do i know the newest version
>2.3 has no already been modified?
>

Check your source for the string '"NULL"' ie the word NULL in double quotes.

We have an older version (2.1a) which appears to be clean.

Al

---------------------------------------------------------------------------
Alastair Young                                     _ 2 Ariel NH Red Hunters
Cadence Design Systems, Information Services     )/___     _  
555 River Oaks Parkway, 4B1                    __/(___)_*##/c 56 Red Menace 
San Jose CA 95134         Fax: (408)894-3487  / /\\|| \ /  \ 
alastaircadence.com           (408)428-5278  \__/ ----'\__/ 49 TwinportKit
---------------------------------------------------------------------------
These statements and opinions are mine, not those of Cadence Design Systems