Re: qpopper related question
On Wed, May 01, 2002 at 11:47:25AM +0200, eim wrote:
Hi,
> I've noted in my syslog a strange qpopper related entry:
>
> * May 1 11:48:10 foobox in.qpopper[11047]: connect from foo.bar.org
> * May 1 11:48:10 foobox in.qpopper[11047]: @foo.bar.org: -ERR Unknown
> command: "capa".
>
> Well, (-ERR Unknown command: "capa") sounds quite strange,
> anyone has idea what this may be..?
Looks like someone used telnet to connect to port 110 and instead of typing
something like
user <foo>
pass <bar>
hi typed somthing like
user <foo>
capa <bar>
Then qpopper returns a
-ERR Unknown command
If your debug level is high engough you'll find this not existing command
in your logs.
Sven
--
Lamer! :)\nLokaler Admin mit enormen Rechten[tm]
[Christian Schneider und Jens Himmelrath in alt.hacker.org-gcf]
http://www.linux-secure.de http://www.linuxboard.de
http://www.bluephod.net http://www.disconow.de
--
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: