|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Subject: Re: RedHat 6.2 boxes root'ed, shitc.tgz installed
From: Andreas Östling (andreaso
IT.SU.SE)Date: Fri Oct 20 2000 - 02:30:09 CDT
- Next message: Mark Robert Williams: "abusers from multiple domains"
- Previous message: Cashdollar, Larry: "Re: What kind of attack?"
- In reply to: josh: "RedHat 6.2 boxes root'ed, shitc.tgz installed"
- Next in thread: Bill Burge: "Re: RedHat 6.2 boxes root'ed, shitc.tgz installed"
- Next in thread: Jeremy Gaddis: "Re: RedHat 6.2 boxes root'ed, shitc.tgz installed"
- Reply: Andreas Östling: "Re: RedHat 6.2 boxes root'ed, shitc.tgz installed"
- Reply: Bill Burge: "Re: RedHat 6.2 boxes root'ed, shitc.tgz installed"
- Reply: josh: "Re: RedHat 6.2 boxes root'ed, shitc.tgz installed"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
> There is a modified sshd /bin/fgry which listens on port 5665
> and /bin/in.slogind that listens on port 19000.
What did the output (if any) look like when connecting to these ports?
/Andreas Östling
- Next message: Mark Robert Williams: "abusers from multiple domains"
- Previous message: Cashdollar, Larry: "Re: What kind of attack?"
- In reply to: josh: "RedHat 6.2 boxes root'ed, shitc.tgz installed"
- Next in thread: Bill Burge: "Re: RedHat 6.2 boxes root'ed, shitc.tgz installed"
- Next in thread: Jeremy Gaddis: "Re: RedHat 6.2 boxes root'ed, shitc.tgz installed"
- Reply: Andreas Östling: "Re: RedHat 6.2 boxes root'ed, shitc.tgz installed"
- Reply: Bill Burge: "Re: RedHat 6.2 boxes root'ed, shitc.tgz installed"
- Reply: josh: "Re: RedHat 6.2 boxes root'ed, shitc.tgz installed"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]