GNU.org: FSF Server Compromised 11/2, Discovered 12/2

"On December 1st, 2003, we discovered that the 'Savannah' system, which is maintained by the Free Software Foundation and provides CVS and development services to the GNU project and other Free Software projects, was compromised at circa November 2nd, 2003.

The compromise seems to be of the same nature as the recent attacks on Debian project servers; the attacker seemed to operate identically. However, this incident was distinctly different from the modus operandi we found in the attacks on our FTP server in August 2003. We have also confirmed that an unauthorized party gained root access and installed a root-kit ('SucKIT') on November 2nd, 2003..."

Complete Story

Related Stories:

• Gentoo Linux Advisory: rsync.gentoo.org Rotation Server Compromised(Dec 04, 2003)
• Debian Investigation Report After Server Compromises(Dec 02, 2003)
• eWeek: Researchers Find Serious Vulnerability in Linux Kernel(Dec 02, 2003)
• ZDNet UK: Debian Attacker May Have Used New Exploit(Dec 01, 2003)