Re: Hacked - again
From: Tobias Klausmann (klausman-un280403_at_schwarzvogel.de)
Date: 04/28/03
- Next message: Andres Bohren: "Re: DNS on the Linux iptables box"
- Previous message: Nico Kadel-Garcia: "Re: Hacked - again"
- In reply to: Stephen Moore: "Hacked - again"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 28 Apr 2003 13:21:25 GMT
Stephen Moore <stephen@skmoore.com> wrote:
> redhat 6.2, they installed
> /etc/initscript
> /usr/bin/initsys
> /usr/bin/updatefs
>
> modified ps, login, ls, netstat and a few other /bin files
>
> hope I have dealt with it.
If "dealing with it" means nothing less than reinstallation from
trusted sources, nothing executable being carried over and a
close audit of all config files, you're right. If not, you can
keep the subject of the article for the soon to come next time.
> I am guessing they got in with a old version of ssh (hoping)
> openssh-clients-2.1.1p1-1.i386.rpm
Oh my....
Greets,
Tobias
- Next message: Andres Bohren: "Re: DNS on the Linux iptables box"
- Previous message: Nico Kadel-Garcia: "Re: Hacked - again"
- In reply to: Stephen Moore: "Hacked - again"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
