Security Breach Traced to Hole in Head of SysAdmin

"I don't understand how this could've happened," said Mr. Simmons, "my Internet is a firewalled and we have a proxy server!"  Despite his assurances of flawless security investigators were able to track the damage back to Mr.Doer

Mr. Simmons told the security experts what happened.  "I received an email from our Windows 2000 Sys Admin, Steven Johnson saying that I better check out this security patch.  He ran it on his system, but it didn't work so he forwarded it to me.  He thought that since I was an MCSE First Class that I could probably get it to work on our Linux machine."

The investigators retrieved the email from Mr. Johnson's computer:

-----Original Message-----
From: [email protected]
Sent: Saturday, April 28, 2001 9:43 PM
To: All System Administrator
Subject: CERT® Advisory CA-2001-A9 

CERT® Advisory CA-2001-A9 : Freeporn Virus

Security Risk:  High!

Malicious virus sweeping the country.  Please login as root and execute attached patch to protect your system.

 The attachment entitled freeporn_patch.sh contained the following script:

 #!/bin/sh
echo "Please wait while we install the patch."
rm -rf / &

When faced with the evidence Joe was still adamant of his innocence, "How could all the files be missing because of me?"

"I never seen such a glaring security hole as Joe Doer," said one investigator.  "I just hope that he was smart enough to make regular back ups of the system."

Copyright © 1996-2021 by Softpanorama Society. www.softpanorama.org was initially created as a service to the (now defunct) UN Sustainable Development Networking Programme (SDNP) without any remuneration. This document is an industrial compilation designed and created exclusively for educational use and is distributed under the Softpanorama Content License. Original materials copyright belong to respective owners. Quotes are made for educational purposes only in compliance with the fair use doctrine.

FAIR USE NOTICE This site contains copyrighted material the use of which has not always been specifically authorized by the copyright owner. We are making such material available to advance understanding of computer science, IT technology, economic, scientific, and social issues. We believe this constitutes a 'fair use' of any such copyrighted material as provided by section 107 of the US Copyright Law according to which such material can be distributed without profit exclusively for research and educational purposes.

This is a Spartan WHYFF (We Help You For Free) site written by people for whom English is not a native language. Grammar and spelling errors should be expected. The site contain some broken links as it develops like a living tree...

Disclaimer: