Crackers exploit buffer overflow to infiltrate hosts

The Computer Emergency Response Team (CERT) last week issued a warning that details evidence of significant increases in automated hack attacks targeting Unix systems.

CERT said crackers can exploit buffer overflow vulnerabilities on Unix platforms, related to remote procedure call (RPC) commands.

"The level of activity and scope of incidents suggests intruders are using scripts to automate attacks. These attempt multiple exploitations but produce similar results," said Bill Pollak, team leader technical communication at CERT.

The attacks are marked by exploitations which execute similar commands to create a privileged back door into a compromised host. Files are changed on root directories.

Users that suspect their host has been compromised are being encouraged to disconnect the host from the network and carry out a full security audit.