Slashdot Mirror


More Info on Debian.org Security Breach

mbanck writes "James Troup (part of the Debian System administration team) has published more information on the recent compromise of four debian.org machines. The attack vector seemed to be a sniffed password of an unprivileged account, from which the attacker somehow managed to gain root and install the suckit rootkit and crack the other machines. As the machines were fairly uptodate with respect to security, an as-of-yet unknown local root exploit might be in the wild, so keep an eye on your boxen.Note that the main ftp archive running on a sparc machine was not compromised, so the exploit might not yet be ported to non-i386 architectures."

26 of 545 comments (clear)

  1. If security is paramount. by Anonymous Coward · · Score: -1, Offtopic

    Be glad you're not a turkey or a piece of my pie in my house.
    Happy Thanksgiving.

    1. Re:If security is paramount. by Anonymous Coward · · Score: -1, Offtopic

      Should I be glad I'm not a turkey, or just a turkey in your house?

      It's turkey time, gobble gobble! *laff*

      Uhm anywa happy thanksgiving everybody, even you furrners who don't celebrate "real" holidays (i.e., any of our made-up american holiday where we pretend it has some religious significance but it's just an excuse to stuff our obese faces with yet more food).

  2. KIRK! by Anonymous Coward · · Score: -1, Offtopic

    Captain's Log: My Anus is too Fucking Tight

    One day Captain Kirk was maiming his cock with a horseshoe when suddenly Mr. Spock ran up to him and shoved his pointy ear up his butt. "What is this for!" the fag captain said. "FAGS FOR YOU AALL!L!!!" the ancient alien howled as suddenly he farted and Captain Kirk twirled around in a daze and his foreskin twisted and his kidney stones turned into wooden beads. He pulled out his pistol and shot lasers at his chastity belt and suddenly he hurdled his dick into Captain Kirk"s bellybutton and it tore his flesh while Spock fucked his stomach. Kirk hollered out loud and Mr. Spock threw his shoes to the floor and wrinkled his penis until Kirk bellowed out to make it stop. A maelstom of shit whizzed around the ship and suddenly a giant fag appeared out side and the U.S.S. Enterprise went up his butt. "Oh what the hell have you gotten us into NOW!" Captain Kirk said as he oozed a condom back on his dick and put his panties back on. "OOH!H!!!!!!" Mr. Spock started fucking him again and shoved his phazer up his butt. He dissolved his glands and exploded his turds and finally a queer klingon hurdled through the door and smashed Kirk with his butt hairs. A maniac sucked his dick and suddenly Mr. Spock fagged Kirk so hard that his intestines burst open and he died.

    *_g_o_a_t_s_e_x_*_g_o_a_t_s_e_x_*_g_o_a_t_s_e_x_*
    g_______________________________________________g
    o_/_____\_____________\____________/____\_______o
    a|_______|_____________\__________|______|______a
    t|_______`._____________|_________|_______:_____t
    s`________|_____________|________\|_______|_____s
    e_\_______|_/_______/__\\\___--___\\_______:____e
    x__\______\/____--~~__________~--__|_\_____|____x
    *___\______\_-~____________________~-_\____|____*
    g____\______\_________.--------.______\|___|____g
    o______\_____\______//_________(_(__>_\___|_____o
    a_______\___.__C____)_________(_(____>_|__/_____a
    t_______/\_|___C_____)/______\_(_____>_|_/______t
    s______/_/\|___C_____)_KIRK!_|_(___>_/__\_______s
    e_____|___(____C_____)\______/__//__/_/_____\___e
    x_____|____\__|_____\\_________//_(__/_______|__x
    *____|_\____\____)___`----___--'_____________|__*
    g____|__\______________\_______/____________/_|_g
    o___|______________/____|_____|__\____________|_o
    a___|_____________|____/_______\__\___________|_a
    t___|__________/_/____|_________|__\___________|t
    s___|_________/_/______\__/\___/____|__________|s
    e__|_________/_/________|____|_______|_________|e
    x__|__________|_________|____|_______|_________|x
    *_g_o_a_t_s_e_x_*_g_o_a_t_s_e_x_*_g_o_a_t_s_e_x_*


    I hate you, I hate your niggers, and I hate your niggers.

    KIRK REIGNS SUPREME!

    Brought to you by: KIRK TROLL

    Fuck GNAA, TROLLKORE, AND CLIT. You all massivly fail it, you gay homofags.

  3. Ask Slashdot by iamatv · · Score: -1, Offtopic

    Ask Slashdot: Television you would hate kids to watch

    This is a revision of the earlier poll: Are Americans and Europeans really like we expect?

    State your country, and put in order the things you would most hate your child (or other children) to watch on television.

    1. Man being shot (acted)
    2. Man being shot (real)
    3. Somebody saying "God damn it!"
    4. Somebody saying "The fucker's fuckin' fucked."
    5. Women's breasts
    6. People having sex (not weird porno sex, but not hidden behind sheets either)

    Current Results
    ---------------
    America, 2 1 6 4 5 3
    America, 6 1 4 2 5 3
    America, 1 6 2 5 4 3
    America, 6 5 3 4 1 2
    Australia, 2 1 4 6 5 3
    Australia, 2 1 6 4 5 3
    Canada, 2 4 3 1 6 5
    New Zealand, 2 1 3 5 6 4

    1. Re:Ask Slashdot by Anonymous Coward · · Score: -1, Offtopic

      US of A

      2,6,5,4,1,3

    2. Re:Ask Slashdot by HarryCallahan · · Score: -1, Offtopic

      America 3,5,6,4,2,1

    3. Re:Ask Slashdot by Anonymous Coward · · Score: -1, Offtopic

      2 6 1 4 3 5

      from the UK.

      Nice concept, btw.

    4. Re:Ask Slashdot by Anonymous Coward · · Score: -1, Offtopic

      The Sovereign State of Nyambi.
      I don't care what my kids watch. They've been preconceptively aborted, however, so they ain't watchin much.

    5. Re:Ask Slashdot by Anonymous Coward · · Score: -1, Offtopic

      Australia, 2 6 1 5 4 3

    6. Re:Ask Slashdot by Anonymous Coward · · Score: -1, Offtopic

      New Zealand, 2,6,1,4,5,3

  4. I have my erect penis in my hand. by Anonymous Coward · · Score: -1, Offtopic

    What should I do now?

    Please help!

  5. KIRK!!! GOD DAMN, I SAID KIRK! by Anonymous Coward · · Score: -1, Offtopic

    Captain's Log: My Anus is too Fucking Tight

    One day Captain Kirk was maiming his cock with a horseshoe when suddenly Mr. Spock ran up to him and shoved his pointy ear up his butt. "What is this for!" the fag captain said. "FAGS FOR YOU AALL!L!!!" the ancient alien howled as suddenly he farted and Captain Kirk twirled around in a daze and his foreskin twisted and his kidney stones turned into wooden beads. He pulled out his pistol and shot lasers at his chastity belt and suddenly he hurdled his dick into Captain Kirk"s bellybutton and it tore his flesh while Spock fucked his stomach. Kirk hollered out loud and Mr. Spock threw his shoes to the floor and wrinkled his penis until Kirk bellowed out to make it stop. A maelstom of shit whizzed around the ship and suddenly a giant fag appeared out side and the U.S.S. Enterprise went up his butt. "Oh what the hell have you gotten us into NOW!" Captain Kirk said as he oozed a condom back on his dick and put his panties back on. "OOH!H!!!!!!" Mr. Spock started fucking him again and shoved his phazer up his butt. He dissolved his glands and exploded his turds and finally a queer klingon hurdled through the door and smashed Kirk with his butt hairs. A maniac sucked his dick and suddenly Mr. Spock fagged Kirk so hard that his intestines burst open and he died.

    *_g_o_a_t_s_e_x_*_g_o_a_t_s_e_x_*_g_o_a_t_s_e_x_*
    g_______________________________________________g
    o_/_____\_____________\____________/____\_______o
    a|_______|_____________\__________|______|______a
    t|_______`._____________|_________|_______:_____t
    s`________|_____________|________\|_______|_____s
    e_\_______|_/_______/__\\\___--___\\_______:____e
    x__\______\/____--~~__________~--__|_\_____|____x
    *___\______\_-~____________________~-_\____|____*
    g____\______\_________.--------.______\|___|____g
    o______\_____\______//_________(_(__>_\___|_____o
    a_______\___.__C____)_________(_(____>_|__/_____a
    t_______/\_|___C_____)/______\_(_____>_|_/______t
    s______/_/\|___C_____)_KIRK!_|_(___>_/__\_______s
    e_____|___(____C_____)\______/__//__/_/_____\___e
    x_____|____\__|_____\\_________//_(__/_______|__x
    *____|_\____\____)___`----___--'_____________|__*
    g____|__\______________\_______/____________/_|_g
    o___|______________/____|_____|__\____________|_o
    a___|_____________|____/_______\__\___________|_a
    t___|__________/_/____|_________|__\___________|t
    s___|_________/_/______\__/\___/____|__________|s
    e__|_________/_/________|____|_______|_________|e
    x__|__________|_________|____|_______|_________|x
    *_g_o_a_t_s_e_x_*_g_o_a_t_s_e_x_*_g_o_a_t_s_e_x_*


    I hate you, I hate your niggers, and I hate your niggers.

    KIRK REIGNS SUPREME!

    Brought to you by: KIRK TROLL

    Fuck GNAA, TROLLKORE, AND CLIT. You all massivly fail it, you gay homofags.

  6. Michael, The Viagra Bitch by Anonymous Coward · · Score: -1, Offtopic
    Hello. My name is Michael. You might know me as the censor at a Geek news site where we pretend to offer news that matters. Or perhaps you remember me as the guy who hijacked an anti-censorship website. Whatever.

    Now is your chance to really know me. I'm going to let you in on my personal life, and the secret of how Timothy, Rob, Jeff, and I all "came" together.

    I remember that autumn day so well. It was in our dorm room at Hope College, in Holland, Michigan. Timothy stood there by the bathroom sink, totally naked and shaving his face. He didn't recoil when I went into the bathroom which we also shared with Rob and Jeff--the guys next door.

    Timothy and I had been roommates for almost three months now and gotten used to seeing each other strip down, dress, and even "hard".

    "Hey, Michael" he said.

    I had gotten the chance to look Timothy over a few times. But for some reason that evening I just stood there looking at his scraggly unkempt hair, his bare back, his flabby back muscles flowing down into the lumpy mounds of cellulite which composed his saggy buttocks and thick thighs.

    Despite his flab, the sexy swastika tattoo on Timothy's right butt cheek gave him an air of hunky manliness.

    "Oh I'm sorry, Timothy" I said without him saying anything despite the fact I had been standing there looking at him.

    "I was just ..." he turned and smiled through the shaving cream. "it's OK ... I look at you too, Michael" he said.

    I didn't know what to say then. I just moved next to him at the sink and stripped off my shirt to wash.

    "Got a hot night tonight, Michael?" he asked.

    "Naw just thought I'd go for a swim and pizza later. How 'bout you, Timothy?"

    "You keep swimming, Michael, and that hot ass of yours will be the talk of the dorm" he said as he patted my butt. He left his hand there and stroked one ass-cheek a bit.

    "You keep doing that and you won't be going anywhere, Timothy" I said half joking. My cock had already began to turn my boxer shorts into a small tent.

    He didn't move his hand at all. In fact his fingers moved under the boxers and he stroked bare skin.

    Timothy said, "Shit, Michael, I'm getting you hard".

    "Yea you get it too hard and you'll have to find a way to get it down again" I said spreading the shaving cream on my face.

    His fingers moved between my ass-cheeks and stroked. It felt good ... and then he suddenly stopped.

    "Can't now ... maybe when I get back. Will you still be up then, Mikey?"

    His hand had moved to my tented crotch and he gently felt my boner when he asked.

    "Not if you keep doing that, Timothy"

    We joked around like that often of course. But that evening his attention was more then the usual goosing or ass grabbing.

    I swam hard laps so my effort and the water would make my cock shrink. But my head was full of the memories of his petting as well as his naked body.

    I knew that after my pizza and maybe a beer, I'd be in my bed jacking off as many times as I could before he got back to the room.

    I was mid-way through my second go round when the door opened. He looked at me and smiled.

    "I hoped you'd be waiting, Michael" he said as he stripped off his shirt and jeans. We didn't speak. Timothy moved to my bed and pulled my covers off.

    Timothy pushed my hands over my head and to the bed pipe. I held them as he lifted my legs and curled my body over so his fingers, lips and tongue could take total control of my body.

    I closed my eyes and swooned as the sensations I had only fantasized about made me shiver and shake. Timothy's fingers stroked the lips of my ass then moved inside to find my prostate and stroked that bringing me to the point of orgasm. The sperm splattered on my face, chest, and stomach.

    But he wasn't through and his cock moved into my ass before it could recover and close tight after the orgasm. It hurt and made me beg him to stop. "Shut up Michael. Y

  7. barf by Anonymous Coward · · Score: -1, Offtopic

    T h e G l o b a l Ne t w o rkof Ar a b Ac t i vi s t s ( G N A A ) isa d e m o c r a t i c f o r u m f o r a l l a c t i v i s t s wh o s t r i v e t o pro m o t e A r a bc u l t u r e and a dva n c e t he c i v i l a n d huma n r i g ht s o f a l l Ar a b p e o ple s . U n l es s i ndic a t e d o t h e r w i se , a ll s t a t e m e n t s p u b l i s h e d o n t hi s f o r u m re p r e s e n t t h e v i e w s o f t h e i r a u th o r s a n d n o t n e c e s s a r i l y tho s eo f G N A A.S u b s c r i ptio n a n dre l a t e d i

  8. Sexy James by Anonymous Coward · · Score: -1, Offtopic

    Why is it always young people find these vulnerabilities? Would this story even be on here if an old bearded professor had found it?

    On the other hand, I'd do him. I'm definitely switching to Debian if hot dudes like him are working on it. That is, after I've moved to Sweden to be with the math chick.

  9. Re:In a nutshell - somehow by Anonymous Coward · · Score: -1, Offtopic

    In a nutshell? Seems pretty short for an O'Reilly book. What animal is going to be on the cover?

  10. a sticky situation by gearheadsmp · · Score: 0, Offtopic

    As a matter of fact, Monica Lewinski gave some teenager who lives in his parent's basement oral sex to write the rootkit. It wasn't that hard - Monica showed up wearing a poncho to shield herself from the shower of "milk", and then the script kidde saw the Saturday Night Live rerun on Comedy Central, in which Bill Clinton announces the end of his legacy, says "Suck it! Suck on it!", and Dubya shows up and brags about how he bought a Big Mouth Billy Bass for $1,000. Hence, the name. Now as to how the script kidde got mad at the Debian project, well, I'll leave that to the Gentoo Zealots.

  11. Re:Boxen.. by Anonymous Coward · · Score: -1, Offtopic

    This might help.

  12. Re:Password was *sniffed* by Anonymous Coward · · Score: -1, Offtopic

    That'd be "could have", not could of. Get with the fucking program.

  13. seems like a good time by Profe55or+Booty · · Score: -1, Offtopic

    seems like a good time to plug my completely pointless and unrelated website: www.isuckit.com (no it's not porn)

    --
    sig - .
  14. Hi by Anonymous Coward · · Score: -1, Offtopic

    1dasdsadassdgggkjkiggh1uhiuhiu1808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfhdfh1dasdih8yh1niu9n987hgggggga 1hb9uhb9dfdfhhb981dasdh8998h

    1dasdsadassdgggkjkiggh1uhiuhiu1
    808h1uffasiuhidasda sdgfhsdasdas1dasddfh

  15. Hey by Anonymous Coward · · Score: -1, Offtopic
    You all are homos!

    [ Reply to This ]



    Screw your filters.. Slut.

  16. HEH by Anonymous Coward · · Score: -1, Offtopic

    This ought to be enough to defeat your gay ass lameness filter.

    Let me just make my fucking post, you asshole, and all will be okay.

    And there's more than fucking 36.2 characters per line in this post, so stop being so fucking gay about it.

    Apparently Slashdot editors are gay and flunked math which is why it's been stuck on 36.2 or 36.3 characters per line for ever.

    So the fucking lameness filter won't let me post this, eh? Yeah right.

    As long as a machine is connected to the internet there is going to be a method to compromise it. My question is this why Debian? They are the only Linux distribution that is truly built by volunteers to gain any mindshare of real note. (not sure about slack so please dont sick bob dobs on me) This is not imhop the work of rank amatuer crackers with there first root kit. These were servers being run by experienced admins using a distro known for stability which when patched and up to date usually means somewhat difficult to hack. I seriously doubt these guys were running winders attempting this either. Wtf is happening to the community when people with talent are attacking a distro that yet again imhop doesnt suck. These guys need to be found and buried. Not by the police but by the commmunity. Last but not least (places tinfoil hat on head) could this have been funded by M$ trying to discredit linux. I cant see the glory angle so its got to be money or power. (no glory in getting called a dick when you tell your friends what you did) From what I understand of the cracker community, Linux is held in fairly high regard (although I admit I don't try to keep up on the latest in the cracker community). You'd think that black-hats, who tend to be rather immature, when armed with a brand new exploit, would attack a site seen by the general public and post goatse.cx images on the front page, rather than subtly changing Debian packages. So, who's behind all this? People with a Slashdot UID of 149812 are not to be trusted. So, what's going on here? Are these simply two unrelated attacks? Is it an attempt by an immature highschooler with some cracking talent to boast to his friends "LOL 1 hax0rred debian.org!?" Is it an attempt by some sort of anti-Linux commandoes to undermine Linux's public image? I almost suspect the latter, but the prime suspect there is Microsoft, who have far too much to lose by going that route and plenty of money for traditional FUD that will make it into "traditional" news channels better anyway. SCO might be crazy enough to do it, but they probably wouldn't want to divert resources away from spewing lawsuits at everyone in existence. To me, this attack and the recent attempt to insert an exploit into the Linux kernel [iu.edu] seem like possible evidence of a disturbing trend: skilled attacks against high-profile Linux sites (you can't get much higher-profile than kernel.org or debian.org). I'm pretty sure that these systems were secured against all known local root exploits; if they weren't, this probably would have happened long ago. This might be a good place to mention that the CVS codebase is almost irreparably insecure. The practical implications are: (1) A remotely-accessible CVS server should never be run on a host that does anything else that matters, or that has access to anything else; (2) An anonymous CVS server should never be the same CVS server that is used for checkins, or even run on the same machine. The pserver should be a slave that only gets read access to a copy of the archive. (3) Checkins on remotely-accessible servers should result in patches logged to another archive kept

  17. WHAT THE FUCK ARE YOU ON ABOUT?!?!? by Anonymous Coward · · Score: -1, Offtopic

    Well?

  18. Re:Password was *sniffed* by Anonymous Coward · · Score: -1, Offtopic

    HAVE!!! That is 'could HAVE'. Stupid fucking American start learning your own fucking language.

  19. Re:Password was *sniffed* by Anonymous Coward · · Score: -1, Offtopic

    Eat another fucking banana you stupid fucking tree nigger.