PGP signed message - the signature hasn't been checked
All DOE Constituents:
Just recently, a DOE site machine was compromised. The operating
system on that machine was Redhat Linux. CIAC believes that the hacker
entered through a well documented security hole. The scripts to exploit
this vulnerability have been made publicly available on Bugtraq. This
particular hacker is very familiar with hacking techniques and is good
at hiding himself. He is targeting high tech sites and the law
enforcement is envolved. CIAC recommends that all DOE sites running
any distribution of Linux implement the patches mention in CIAC
bulletins H-46 and recently released H-86. If you notice any strange
activities or if you have any questions, please contact CIAC as soon
as possible.
CIAC