In January 1999, the distribution package at Eindhoven University of Technology (the primary distribution site until that day) was replaced by a modified version. The replacement contained a trojaned version of the software that would allow the intruder access to any server that it was installed on. The author spotted this within hours, upon which he relocated the primary distribution to his personal site.3456
TCP WRAPPER - Network monitoring, access control, and booby traps. by Wietse Venema (USENIX UNIX Security Symposium III, 1992) http://ftp.porcupine.org/pub/security/tcp_wrapper.pdf ↩
GNU/Linux Ping Daemon by route|daemon9 - Phrack Magazine Volume 8, Issue 52 January 26, 1998, article 07 http://phrack.org/issues/52/7.html#article ↩
"CERT Advisory CA-1999-01 Trojan horse version of TCP Wrappers" (PDF). Carnegie Mellon University Software Engineering Institute. Archived from the original on 2000-10-17. Retrieved 15 September 2019. https://resources.sei.cmu.edu/asset_files/WhitePaper/1999_019_001_496184.pdf#page=5 ↩
"CERT Advisory CA-1999-02 Trojan Horses" (PDF). Carnegie Mellon University Software Engineering Institute. Archived from the original on 2000-10-17. Retrieved 15 September 2019. https://resources.sei.cmu.edu/asset_files/WhitePaper/1999_019_001_496184.pdf#page=14 ↩
backdoored tcp wrapper source code, by Wietse Venema, on Bugtraq, Jan 21, 1999 http://seclists.org/bugtraq/1999/Jan/0257.html ↩
Announcement: Wietse's FTP site has moved, by Wietse Venema, on Bugtraq, Jan 21, 1999 http://seclists.org/bugtraq/1999/Jan/0314.html ↩