4 ms·
> Keeping their systems patched and up-to-date. Which systems were these? I didn't see anything that implied they were compromised through a missing patch. If
by iuguy 16y ago
> Keeping their systems patched and up-to-date.
Which systems were these? I didn't see anything that implied they were compromised through a missing patch.
If you're referring to the CMS, then that could just be a bit of custom code. We don't know.
- samlittlewood 16y agoThere was apparently a privilege escalation from Greg Holund's ssh account on the support machine - leading to the rootkit.com data and further credentials.
- iuguy 16y agoThanks for pointing that out - I missed it. Was thinking of rootkit.com.
- bartman 16y agoFrom page 2: "The only way they can have some fun is to elevate privileges through exploiting a privilege escalation vulnerability. These crop up from time to time and generally exploit flaws in the operating system kernel or its system libraries to trick it into giving the user more access to the system than should be allowed. By a stroke of luck, the HBGary system was vulnerable to just such a flaw. The error was published in October last year, conveniently with a full, working exploit. By November, most distributions had patches available, and there was no good reason to be running the exploitable code in February 2011."
- iuguy 16y agoThanks. I was getting confused about the root password with jussi's email.