However, the majority of these reports involve sites that have detected intruders scanning for the presence of these tools. Because of this, we encourage you to investigate any unexplained network traffic. Over the past few months, we have seen an increase in the number of incident reports related to Trojan horse programs affecting both Windows and UNIX platforms. The advisory also provides advice for system and network administrators, end users, software developers, and distributors. By supplying carefully designed commands to the FTP server, intruders can force the server to execute arbitrary commands with root privilege.
Intruders can exploit the vulnerability remotely to gain administrative access.
Using encryption We strongly urge you to encrypt sensitive information sent by email. If you prefer to use DES, please call the CERT hotline for more information. Copyright 1999 Carnegie Mellon University. Carnegie Mellon University makes no warranties of any kind, either expressed or implied as to any matter including, but not limited to, warranty of fitness for a particular purpose or merchantability, exclusivity or results obtained from use of the material. Carnegie Mellon University does not make any warranty of any kind with respect to freedom from patent, trademark, or copyright infringement.