Aug 14, 2003 : GNU Project Servers Breached By Hacker
📅 - A root compromise and a Trojan horse were discovered on the FTP server of the GNU project (gnu.org), an organization that develops the GNU/Linux operating system.
The GNU project reported this week that the system was first cracked in March 2003 but was only discovered in the last week of July 2003.
The hacker compromised the server to the root level and was able to take complete control over the system. It appeared to be using the FTP server to collect passwords and use it as a launching point to attack other machines.
According to the GNU Project, it has spent the last few weeks investigating the security compromise and verifying the integrity of the source code stored on gnuftp.
The organization is confident that no other compromises have taken place. "We have lots of evidence now to believe that no source has been compromised," the GNU project said in a statement. "The evidence includes the MO of the cracker, the fact that every file we've checked so far isn't compromised, and that searches for standard source trojans turned up nothing."
The computer security response organization CERT warned on Wednesday that the breach could prove to be a serious problem.
The GNU project reported this week that the system was first cracked in March 2003 but was only discovered in the last week of July 2003.
The hacker compromised the server to the root level and was able to take complete control over the system. It appeared to be using the FTP server to collect passwords and use it as a launching point to attack other machines.
According to the GNU Project, it has spent the last few weeks investigating the security compromise and verifying the integrity of the source code stored on gnuftp.
The organization is confident that no other compromises have taken place. "We have lots of evidence now to believe that no source has been compromised," the GNU project said in a statement. "The evidence includes the MO of the cracker, the fact that every file we've checked so far isn't compromised, and that searches for standard source trojans turned up nothing."
The computer security response organization CERT warned on Wednesday that the breach could prove to be a serious problem.
Reads: 2015 | Category: General | Source: TheWHIR : Web Host Industry Reviews
URL source: http://www.thewhir.com/marketwatch/gnu081403.cfm
Want to add a website news or press release ? Just do it, it's free! Use add web hosting news!
📅 -
📅 -