[Samba] Huh... 2.2.8 exploit?!

[Gémes Géza]

Vizitiu, Ciprian írta:

>... By my mistake a 2.2.8a-1 running on RH8 was exposed to the Internet. It
>was cracked in a matter of hours. I noticed it because they've deleted my
>smbd. :-| 
>
>I'm ready to reinstall the machine, if there are any logs that anybody is
>interested into please say it now. 
>  
>
Are you really shure, that the computer was breaked through samba, you 
can be sure only if just the samba ports (137,138,139,445) was opened to 
the Internet?!