• info
• discussion
• exploit
• solution
• references

TCP Wrapper Backdoor Vulnerability

Solution:
After the break-in was discovered, the TCP Wrappers distribution site was moved to another location. If you feel you downloaded a backdoored version we suggest you download a new copy from the following site:

ftp://ftp.porcupine.org/pub/security/index.html

Furthermore to discover wether your version is vulnerable you may wish to examine the follwing MD5 checksums and sizes made available in the CERT advisory issued on this incident:

Correct version:
tcp_wrappers_7.6.tar.gz
MD5 = e6fa25f71226d090f34de3f6b122fb5a
size = 99438
tcp_wrappers_7.6.tar
MD5 = 5da85a422a30045a62da165404575d8e
size = 360448

Trojan Horse version:
tcp_wrappers_7.6.tar.gz
MD5 = af7f76fb9960a95a1341c1777b48f1df
size = 99186