misc/155941: mwserv library support is not included in nepenthes.conf config file for Nepenthes honeypot port

Muhammad Najmi Ahmad Zabidi najmi.zabidi at gmail.com
Sat Mar 26 02:10:12 UTC 2011


>Number:         155941
>Category:       misc
>Synopsis:       mwserv library support is not included in nepenthes.conf config file for Nepenthes honeypot port
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Sat Mar 26 02:10:11 UTC 2011
>Closed-Date:
>Last-Modified:
>Originator:     Muhammad Najmi Ahmad Zabidi
>Release:        FreeBSD 8.2
>Organization:
International Islamic University Malaysia
>Environment:
FreeBSD freebsd 8.2-RELEASE FreeBSD 8.2-RELEASE #0: Fri Feb 18 02:24:46 UTC 2011     root at almeida.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386

>Description:
Support for mwserv is not included while the mwserv library is already in /lib

[root at freebsd /usr/local/etc]# ls -lh ../lib/nepenthes/submitmwserv.*
-rw-r--r--  1 root  wheel    79K Feb  3 09:41 ../lib/nepenthes/submitmwserv.a
-rwxr-xr-x  1 root  wheel   923B Feb  3 09:41 ../lib/nepenthes/submitmwserv.la
-rwxr-xr-x  1 root  wheel    68K Feb  3 09:41 ../lib/nepenthes/submitmwserv.so


>How-To-Repeat:
It's default in the port came in. Basically whoever have an access to https://alliance.mwcollect.org/ for malware heartbeat will need this
>Fix:
Patch for nepenthes.conf:


+   "submitmwserv.so",              "submit-mwserv.conf",       ""


Patch attached with submission follows:

+   "submitmwserv.so",	            "submit-mwserv.conf",	"" 


>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-bugs mailing list