rpc.statd error

[jrv at vanzandt.mv.com (James R. Van Zandt)]

Phil Buckley <phil at 1918.com> writes:

>Anyone have an idea why I might be getting this error (from log
>file)? Also, does anyone have a suggestion for checking to see if
>statd is functioning properly?
>
>TIA,
>Phil
>
>Apr 21 11:00:48 galloproductions rpc.statd[342]: gethostbyname error
for ^X)B???^X???^Z???^Z???%...

This looks like a buffer overflow exploit.  I got hit with one a
couple of weeks ago.

See http://www.sans.org/y2k/adore.htm for more information, or visit
Google and search for "rpc.statd buffer overflow".

	   - Jim Van Zandt


-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).