OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: spam (spam_at_anti-sekurity.org)
Date: Sun Jul 21 2002 - 17:35:30 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Just saw this on the security-audit list, thought maybe it should be here:

    ---------- Forwarded Message ----------

    Subject: Mandrake 8.2 MSEC
    Date: 21 Jul 2002 23:58:06 -0000
    From: Dan <silver83gte.net>
    To: security-auditferret.lmh.ox.ac.uk

    Hello guys i'm confused here if anyone could clarfy this for me that would
    be great!
    [rootpulserate silveradmin]# msec 1
    msec: unable to parse chage output

    Does anyone know what this means? why does it do this it just started
    this .. i have this on now two systems at work Is it possible that they
    got exploited some how? i keep up on updates any ideas?

    okay i currently administer 2 systesm that have mandrake 8.2(work) and 1
    8.1 at my house here
    WELL, the two systems i BELIVE but NOT sure that they are/were compromised
    I know for a fact that the system at home ISN'T Well something weird went
    first. The msec was working fine till one day some guy msged my boss
    online on IRC w/ one of our hostnames either he somehow spoofed it and got
    on w/ a Ident which isnt changeable in Mandrake for the usernames i didnt
    see anything but then ever since that the system didnt work correctly ..
    well the MSEC didnt got the error up above even if i just run 'msec'
    should just run it but it doesnt gives me that info like what changed and
    all the other goodies.. Now just recently another one of our boxes started
    to do it which hosts our websites.. now im really worried that something
    got compromised somehow someway i dont know which if anyone has any ideas
    please tell me btw i've been running the mandrake systems 8.2 for the past
    6 months and mine at home for the past 3 yrs and havent had that problem..
    so im not sure what to think as of right now hopefully someone has some
    pointers Thanks ahead of time!

    -------------------------------------------------------

    For help, email discuss-helpmandrakesecure.net; to unsubscribe send a
    message to discuss-unsubscribemandrakesecure.net. To visit MandrakeSecure,
    go to http://www.mandrakesecure.net/.