From owner-FreeBSD-users-jp@jp.freebsd.org  Wed Jul 19 21:02:40 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id VAA26436;
	Wed, 19 Jul 2000 21:02:40 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from blue.ocn.ne.jp (blue.ocn.ne.jp [202.234.232.78])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id VAA26431
	for <FreeBSD-users-jp@jp.freebsd.org>; Wed, 19 Jul 2000 21:02:39 +0900 (JST)
	(envelope-from ueta@pixy.issp.u-tokyo.ac.jp)
Received: from localhost (p56-dn07inage.chiba.ocn.ne.jp [210.227.242.57])
	by blue.ocn.ne.jp (8.9.1a/OCN/) with ESMTP id VAA15326;
	Wed, 19 Jul 2000 21:02:37 +0900 (JST)
To: FreeBSD-users-jp@jp.freebsd.org
Cc: ueta@pixy.issp.u-tokyo.ac.jp
In-Reply-To: Your message of "Wed, 19 Jul 2000 18:26:59 +0900"
	<3975746338F.A0D2S_TATSUNO@172.20.1.18>
References: <3975746338F.A0D2S_TATSUNO@172.20.1.18>
X-Mailer: Mew version 1.93 on Emacs 19.28 / Mule 2.3 (SUETSUMUHANA)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Message-Id: <20000719210847H.ueta@pixy.issp.u-tokyo.ac.jp>
Date: Wed, 19 Jul 2000 21:08:47 +0900
From: Ueta Masateru <ueta@pixy.issp.u-tokyo.ac.jp>
X-Dispatcher: imput version 980905(IM100)
Lines: 87
Reply-To: FreeBSD-users-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: FreeBSD-users-jp 53507
Subject: [FreeBSD-users-jp 53507] Machine security(Re:
 =?ISO-2022-JP?B?GyRCJUclIyU5JS8lUSE8JUYlIyU3JWclcyRLJEQbKEI=?=
 =?ISO-2022-JP?B?GyRCJCQkRhsoQg==?=)
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org
X-Originator: ueta@pixy.issp.u-tokyo.ac.jp

$B$3$s$K$A$O?"ED$G$9!#(B
From: Shinya Tatsuno <s_tatsuno@psd.co.jp>
Subject: [FreeBSD-users-jp 53505] Re: $B%G%#%9%/%Q!<%F%#%7%g%s$K$D$$$F(B
Date: Wed, 19 Jul 2000 18:26:59 +0900
Message-ID: <3975746338F.A0D2S_TATSUNO@172.20.1.18>
> $B$b$A$m$s!">\$7$/$O8@$($^$;$s$,!"9M$($i$l$kBP:v$OB>$K$b;3$[$I$7$F$*$j$^$9!#(B
> $B$?$@$7!"(Bwu-ftpd 2.6.0 $B$N7o$N$h$&$K!"30It$+$i$$$-$J$j%9!<%Q!<%f!<%68"8B$r(B
> $B<h$i$l$F$7$^$&$h$&$J;vNc$b$"$k$N$G!">/$J$/$H$b?/32$,$"$C$?$H$$$&;v<B$@$1(B
> $B$G$b;D$9$h$&$K$7$h$&$H!"$$$m$$$mJY6/$7$F$$$^$9!#(B

$B$3$&$$$&J}K!$K$h$j(B root $B8"8B$,C%<h$5$l!"$=$7$F(B binary $B$r=q49$($i$l$F$7(B
$B$^$&$3$H$,?4G[$J$i!"$?$H$($P(B

1.$B$^$:(B Internet $B$KJ*M}E*$K@\B3$5$l$F$$$J$$>uBV$G(B install $B$9$k(B
#$B6qBNE*$K$O(B LAN cable $B$r30$7$F$*$-$^$9(B

2.$B$5$i$K(B install $B8e!"(BInternet $B$K@\B3$9$kA0$K!"A4$F$N(B file $B$N(B MD5 $B$r$H$C(B
$B$F$*$/!#$5$i$K!"$=$l$rJL$N7W;;5!$K(B Internet $B0J30$N<jK!$r$H$C$FE>Aw$7$F(B
$B$*$/!#$5$i$K!";f$K=PNO$7$F$*$/!#(B

3.cron $B$J$j$GA4$F$N(B file $B$N(B MD5 $B$r$H$j!"$=$N7k2L$rJL(B host $B$KE>Aw$9$k(B
4.$BJL(B host $B$G!"Aw$i$l$F$-$?FbMF$H(B install $B;~$K$H$C$?FbMF$rHf3S$9$k!#(B
5.$B$5$i$K!"G0$K$OG0$rF~$l$F(B md5 $B$N(B binary $B$OJL$N<jCJ$G8!>Z$G$-$k$h$&$K(B
$B$9$k!#(B

$B$H!"$A$g$C$HLLE]$/$5$$J}K!$r$H$k$@$1$G!"0BA4@-$O$+$J$j>e>:$9$k$H;W$$$^(B
$B$9!#(B
#$B$3$N>l9g(B point $B$O(B network $B$r;H$o$:$K86K\$r$H$C$?$3$H$H!"JL$N7W;;5!$*(B
#$B$h$SG^BN$H$N>H9g$r$9$k$3$H$G$9$M!#(B

$B$7$+$7!":,K\E*$K$O!"(B
1.$B$I$N$h$&$J4mW|$,9M$($i$l$k$N$+!)(B
2.$B$=$l$K$h$C$F5/$-$kHo32$O$I$NDxEY$J$N$+!)(B
$B$H$$$&$h$&$J$3$H$,L@$+$K$J$i$J$$$H!"2?$b8@$($J$$$H;W$$$^$9!#(B

$B$?$@0l$D$@$18@$($k$3$H$O!"!V$"$k$3$H$rKI;_$9$k$?$a$K!"$h$jJ#;($J$3$H$r(B
$B2]$7$F$O$$$1$J$$!#BgBN!"$=$NBP:v$,J#;($K$J$k$3$H8N$K!";v8N$,A}$($?$j$9(B
$B$k$N$,0lHLE*$G$"$k!#!W$H$$$&$3$H$G$9!#(B
#$B$3$l$O!"7W;;5!$K8B$C$?$3$H$G$O$"$j$^$;$s!#(B

$B$7$?$,$C$F!"8D?ME*$K$O(B /sbin $B$H(B /bin $B1>!9$KEXNO$r$5$l$k$h$j$O!"$b$&$A$g$C(B
$B$HJL$N$H$3$m$r8+D>$5$l$kJ}$,59$7$$$+$H;W$$$^$9!#(B
#$BEv=i$N(B mail $B$+$i$O!"BgJQ<:Ni$J$N$G$9$,!"$J$s$H$J$/L\E*$H<jCJ$,$R$C$/(B
#$B$jJV$C$F$*$i$l$k$h$&$J0u>]$r<u$1$^$9!#(B

($BM>CL(B)
$B8D?ME*$J0U8+$G$9$,!"(Bsecurity $BBP:v$r(B 1 $BBf$N7W;;5!$@$1$G9T$J$*$&$H$9$k$H!"(B
$BI,$:GKC>$9$k$H;W$C$F$$$^$9!#7W;;5!$K>c32$rM?$($h$&$H$9$k<jCJ$O!"(B
network $B$rI,?\$H$7$F$$$^$;$s!#$=$l$3$=!"$=$N7W;;5!$,CV$$$F$"$kIt20$K$$$C(B
$B$F!"C!$-2u$9(B or $BEE8;$rMn$7$F(B HDD $B$@$1$r;}$C$F$/$k$@$1$G$bNI$$$o$1$G$9!#(B

$B$=$&$$$&Cf$G(B network $B$,;H$o$l$k$N$O!"C1$K<B:]$KIk$/$h$j$O3Z$@$+$i$G$9!#(B
$B$D$^$j!"(Bcracker $B$K$H$C$F(B cracking $B$N%3%9%H$,0B$$$+$i$K$9$.$^$;$s!#$3$N(B
$B798~$O!"<B:]$K;n$_$i$l$k(B cracking $B$r8+$F$b$h$/$o$+$j$^$9!#$?$H$($P!"(B
cracking $B$r;n$_$NB?$/$O!"8E$N(B phf.cgi $B$@$C$?$j!"@N!9$N(B qpopper $B$N7j$r(B
$B$D$D$$$F$/$k$b$N$@$C$?$j!"$"$k$$$O(B sendmail $B$K(B relay $BMW5a$r$7$?$j$9$k(B
$B$b$N$G!"DDIe$J$b$N$P$+$j$G$9!#$=$7$F!"$=$l$i$,$O$M$+$($5$l$?$i!"BgJ}$O(B
$B$J$K$b$;$:$K$5$C$F$$$-$^$9!#(B

$B5U$K8@$($P!"$3$N$3$H$O!"$?$H$($P=EMW$J(B data $B$K4XO"$9$k$b$N$O!"JL$N7W;;(B
$B5!$H$+!"7W;;5!30$KCV$$$F$*$/$@$1$G!"$+$J$j$N>l9g$,4m5!$rL$A3$K2sHr$G$-(B
$B$k$3$H$r0UL#$7$F$$$^$9!#(B

> $B%M%C%H%o!<%/4IM}$r$d$j=i$a$F$+$i!"$$$+$K%$%s%?!<%M%C%H>e$K%-%A%,%$$,B?$$(B
> $B$+$,$h$/$o$+$j$^$7$?!#%]!<%H%9%-%c%s$J$s$+$O!"B>?M$N2H$K80$,$+$+$C$F$k$+(B
> $B!"$^$?$=$N80$K@H<e@-$,$J$$$+Hb$rD4$Y$F$^$o$k$h$&$J$b$N$G!"6a$/$K$*$^$o$j(B
> $B$,$$$l$P3N<B$K?&L3<ALd$5$l$k$G$7$g$&$,!"%$%s%?!<%M%C%H>e$G$OJ|CV$5$l$F$$(B
> $B$^$9!#(B

$B$G$9$+$i!">e5-$N$h$&$J>l9g$G$O!"!V80$r$+$1$F$$$l$PNI$$$N$G$"$C$F!"80$,(B
$B3+$$$F$$$k$+(B test $B$5$l$?$N$O5$$K$7$J$/$F$bNI$$!W$H$$$&%9%?%s%9$G$"$?$k(B
$B$N$,NI$$$H;W$C$F$$$^$9!#<B:]!"$=$NDxEY$@$C$?$i$[$C$?$i$+$7$F$*$$$F$bLd(B
$BBj$O$"$j$^$;$s!#(B

#$B$b$A$m$s(B CERT $B$"$?$j$K$OJs9p$r$7$F$*$/$H(B cracker $B$,(B 1 $B?M>C$($kMW0x$K(B
#$B$J$C$FNI$$$+$b$7$l$^$;$s(B :-)

$B7k6I$O!"$I$&$$$&4mW|$,$"$k$HM=A[$5$l!"$=$l$KBP$7$F$I$l$@$1$NHo32$*$h$S(B
$BM=KI%3%9%H$rJ'$&$N$+!)!"$=$7$FE((B(cracker)$B$O!"$I$&$$$&O"Cf$J$N$+!)!#$3(B
$B$&$$$&$3$H$rM}2r$7$F$$$l$P!"L50UL#$KIT0B$r;}$DI,MW$OL5$$!"$H$$$&$N$,;d(B
$B$NG'<1$G$9!#(B
#$B$`$7$m!"2<<j$KMY$i$5$l$k$H5U$K$=$l$,(B cracker $B$NA@$$L\$K$J$C$?$j$9$k>l(B
#$B9g$,$"$j$^$9$7(B ;-)

$B$G$O$G$O(B
--
$B?"ED(B $B@551(B(ueta@pixy.issp.u-tokyo.ac.jp)
