Email address obfuscation in effect -- please
click here to turn it off.
[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
On Thu, 15 May 2008, Daniel Nowlin wrote:
I know what you mean Mike. I have ran MDK, FC, and not CentOS and I
have NEVER let root have ssh access. No need that is what sudo is for.
And if you have a lot of root stuff to do and do/can not get to the
machine then just su to root. Now I wonder if you ssh in as a user if
this vulnerability will work.
Apparently it does work for other users. That's what I'm hearing.
Anyway, the thing is, most script kiddies are just going to start
attacking root for now. Why mess with a bunch of other possible user
names? Maybe when that fails they'll try some other usernames.
Meanwhile, boxes are being patched so we're ready.
Mike
_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members