Re: rpc.statd being attacked?

[Daniel Jacobowitz <dan@debian.org>]

On Tue, Aug 21, 2001 at 01:28:24PM -0700, Daniel Schepler wrote:
> I've gotten logs several times that read something like
> 
> Aug 20 19:20:24 adsl-63-193-247-253 rpc.statd[330]: gethostbyname error for ^X
> <F7><FF><BF>^X<F7><FF><BF>^Y<F7><FF><BF>^Y<F7><FF><BF>^Z<F7><FF><BF>^Z<F7><FF>
> <BF>^[<F7><FF><BF>^[<F7><FF><BF>%8x%8x%8x%8x%8x%8x%8x%8x%8x%236x%n%137x%n%10x%n%

You're safe.  It was fixed before potato; it would not have been logged
if it had succeeded.

-- 
Daniel Jacobowitz                           Carnegie Mellon University
MontaVista Software                         Debian GNU/Linux Developer