Poisoned Pipeline / Incidents / AS266

AS266 · 1999-01

tcp-wrappers tarball granted remote root

Linux distro / packages

Catalogued from the tstromberg supplychain-attack-data dataset
(community-curated incident corpus). Included because first-party
sources exist for it; see the links below — vendor advisories, project
incident reports, and researcher write-ups. Not based on aggregator
coverage.

Mapped techniques

• T0209 Compromise package registry or CDN origin

supply-chain campaign

Sources

• https://seclists.org/bugtraq/1999/Jan/257
• https://web.archive.org/web/20140720105610/http://www.cert.org/advisories/CA-1999-01.html
• https://seclists.org/bugtraq/1999/Jan/282
• https://www.cs.toronto.edu/sunmanagers/1999/0096.html
• https://attrition.org/security/advisory/fedcirc/1999/fedcirc.99.01.txt
• https://en.wikipedia.org/wiki/TCP_Wrappers#Security