>Is it possible the intruder guessed the password on the postgres
>administrator's account?

No, I don't think so. The password was really complicated and had special
characters inside of it. Its content had nothing to do with us or the
postgres database.

>Or perhaps a script run via mail?

We have nothing installed, which would enable a behaviour like this, at
least not as far as we know. I cannot imagine, that something like this is
part of a standard Linux distribution.

Matthias
------------------------------------------------------------------
Matthias Schmitt
magic moving pixel s.a.    Phone: +352 54 75 75 - 0
Technoport Schlassgoart    Fax  : +352 54 75 75 - 54
66, rue de Luxembourg      URL  : http://www.mmp.lu
L-4221 Esch-sur-Alzette    Email: info@mmp.lu

Tue, 27 Apr 1999 19:09:55 +0200
Matthias Schmitt <freak001@mmp.lu>
Re: [HACKERS] Hacker found bug in Postgres ?