二月初發現的吧？應該不少人已經知道了
Document Audience: PUBLIC
Document ID: 102802
Title: Security Vulnerability in the in.telnetd(1M) Daemon May Allow Unauthorized Remote Users to Gain Access to a Solaris Host
Copyright Notice: Copyright © 2007 Sun Microsystems, Inc. All Rights Reserved
Update Date: Wed Feb 28 00:00:00 MST 2007
Solaris 10 & Solaris 10 x86 均受影響
當然，不開 telnet 僅用 ssh 的人可以忽略，不過我知道很多 user 為了方便還是都會開 telnet 允許 root remote login
除了 patch 外，最簡單就是 disable root remote login 了
延伸閱讀: A 13 year old froot
這篇由 source code 解釋了原因
是給它有點誇張說...
Verify the NBU 6.0 daemons / services are up and running
The bpps command in NetBackup 6.0 to see shared Veritas processes
# /usr/openv/netbackup/bin/bpps -x
On Netbackup Master Server:
http://support.veritas.com/docs/281789
The following is a listing of the services that need to be running on a NetBackup 6.0 master server:
On Netbackup Media Server:
http://support.veritas.com/docs/282159
The following is a listing of the services / daemons which should be running by default on a NetBackup 6.0 media server:
On Netbackup Client:
http://support.veritas.com/docs/282162
There are no additional daemons or services that run on a NetBackup 6.0 client. Checking to see if the client software is running is similar to NetBackup 5.x and earlier versions. It is only necessary to check for the existence of the NetBackup Client Service (bpcd).
The NetBackup client software registers itself with inetd or xinetd on UNIX or Linux clients. The "netstat -a" command can be used to verify these daemons are in LISTEN status, indicating they are listening for incoming connections.
# netstat -a | grep bpcd
# netstat -a | grep bpjava-msvc
# netstat -a | grep vnetd
# netstat -a | grep vopied
# /usr/openv/netbackup/bin/bpps -x
On Netbackup Master Server:
http://support.veritas.com/docs/281789
The following is a listing of the services that need to be running on a NetBackup 6.0 master server:
- Adaptive Server Anywhere - VERITAS_NB - ASA Database service (NB_dbsrv)
- Netbackup Client Service (bpcd)
- NetBackup Compatibility Service (bpcompatd)
- NetBackup Database Manager (bpdbm)
- NetBackup Device Manager (ltid)
- Netbackup Enterprise Media Manager (nbemm)
- NetBackup Job Manager (nbjm)
- NetBackup Notification Service (nbnos)
- Netbackup Policy Execution Manager (nbpem)
- Netbackup Request Manager (bprd)
- NetBackup Resource Broker (nbrb)
- NetBackup Service Layer (nbsl)
- NetBackup Service Monitor (nbsvcmon)
- Netbackup Volume Manager (vmd)
- Veritas Private Branch Exchange (pbx_exchange)
On Netbackup Media Server:
http://support.veritas.com/docs/282159
The following is a listing of the services / daemons which should be running by default on a NetBackup 6.0 media server:
- Netbackup Client Service (bpcd)
- NetBackup Compatibility Service (bpcompatd)
- NetBackup Device Manager (ltid)
- NetBackup Notification Service (nbnos)
- NetBackup Service Layer (nbsl)
- NetBackup Service Monitor (nbsvcmon)
- Netbackup Volume Manager (vmd)
- Veritas Private Branch Exchange (pbx_exchange)
On Netbackup Client:
http://support.veritas.com/docs/282162
There are no additional daemons or services that run on a NetBackup 6.0 client. Checking to see if the client software is running is similar to NetBackup 5.x and earlier versions. It is only necessary to check for the existence of the NetBackup Client Service (bpcd).
The NetBackup client software registers itself with inetd or xinetd on UNIX or Linux clients. The "netstat -a" command can be used to verify these daemons are in LISTEN status, indicating they are listening for incoming connections.
# netstat -a | grep bpcd
# netstat -a | grep bpjava-msvc
# netstat -a | grep vnetd
# netstat -a | grep vopied
[轉載] The Golden Rules of Sun Systems Administration
The Golden Rules of Sun Systems Administration
Peter Baer Galvin
這篇文章真是經典！碰到太多狀況都不出這幾條金科玉律
Peter Baer Galvin
這篇文章真是經典！碰到太多狀況都不出這幾條金科玉律
- When in Doubt, Reboot
- Communicate with Users
- If You Have a Problem, Check the Cables (被線玩過好多次...)
- All Projects Take Twice the Estimated Time and Money
- It's Not Done Until It's Tested
- Never Change Anything on Fridays
- Use Defaults Whenever Possible
- Create a Backup
- Avoid Poor Decisions from Above
- If You Haven't Seen It Work, It Probably Doesn't
- If You Are Constantly Fighting Fires, Find the Source
- If You Don't Understand It, Don't Play with It on the Production Systems
- If It Can be Accidentally Used, and Can Produce Bad Consequences, Protect It
- Ockham's Razor is Very Sharp Indeed
訂閱：
文章 (Atom)