[Mldonkey-bugs] [bug #5078] Possible remote exploit?

[nobody]

=================== BUG #5078: LATEST MODIFICATIONS ==================
http://savannah.nongnu.org/bugs/?func=detailbug&bug_id=5078&group_id=1409

Changes by: Anonymous user        Date: Sun 09/28/2003 at 09:12

------------------ Additional Follow-up Comments ----------------------------
You shouldn't use snort if you don't know how to decipher the output (a 
completely valid packed may have triggered this (this is called a false 
positive)).



=================== BUG #5078: FULL BUG SNAPSHOT ===================


Submitted by: None                    Project: mldonkey, a free e-Donkey client
Submitted on: Fri 09/05/2003 at 10:33
Category:  eDonkey-plugin             Severity:  5 - Major                  
Bug Group:  None                      Resolution:  None                     
Assigned to:  None                    Status:  Open                         
Release:  None                        Release:  2.5-3                       
Platform Version:  Linux i386-i686    Binaries Origin:  Downloaded from Savannah

Summary:  Possible remote exploit?

Original Submission:  09/05-15:50:51.637260  [**] [1:649:5] SHELLCODE x86 
setgid 0 [**] [Classification: A system call was detected] [Priority: 2] {TCP} 
195.83.42.130:11175 -> 217.236.88.xxx:4662



address@hidden root]# host 195.83.42.130

130.42.83.195.in-addr.arpa domain name pointer firewall.sop.cstb.fr.



Follow-up Comments
*******************

-------------------------------------------------------
Date: Sun 09/28/2003 at 09:12       By: None
You shouldn't use snort if you don't know how to decipher the output (a 
completely valid packed may have triggered this (this is called a false 
positive)).


CC list is empty


No files currently attached


For detailed info, follow this link:
http://savannah.nongnu.org/bugs/?func=detailbug&bug_id=5078&group_id=1409

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/