Gentoo: GLSA-200312-01 Normal: Remote Exploit on Rsync Server

- ---------------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200312-01
- ---------------------------------------------------------------------------
GLSA: 200312-01
summary: rsync.gentoo.org rotation server compromised
severity: normal
date: 2003-12-02
CVE: None
exploit: remote

DESCRIPTION:

On December 2nd at approximately 03:45 UTC, one of the servers that makes up
the rsync.gentoo.org rotation was compromised via a remote exploit. At this
point, we are still performing forensic analysis. However, the compromised
system had both an IDS and a file integrity checker installed and we have a
very detailed forensic trail of what happened once the box was breached, so
weare reasonably confident that the portage tree stored on that box
wasunaffected. 
The attacker appears to have installed a rootkit and modified/deleted some
files to cover their tracks, but left the server otherwise untouched. The box
...
Read the Full Advisory