Re: Not so much a bug as a warning of new brute force attack

In bugraq, Brett L. Hawn writes:

>Last night nol.net was the recipient of a new brute force password attack
>and I thought I'd share with you the attack and my reccomended solution.

>The Attack:

>Using the pop3 mechanism to crack user passwords

Nice, indeed. :-> Another daemon which is just perfectly suited for
this attack is pcnfsd - its main purpose is checking passwords. We had
to hack it up before (having to) use it on one of our servers about a
year ago.

tlr
Received on Jun 03 1996