Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
[suse-security] Strange entry in message-log?
From: Albl, Thomas (thomas.alblstaedtetag.de)
Date: Fri Jul 04 2003 - 06:00:12 CDT
sorry I'm not very used with the entries in the message-log, though I can't
identify, if the following lines are harmless (because the system has done
something for which it uses root rights) or dangerous (because someone has
hacked the box an got root rights for the user nobody)
Jul 3 00:15:12 www PAM-unix2: session started for user nobody,
Jul 3 00:16:54 www PAM-unix2: session finished for user nobody,
The Linux-Box runs SuSE-Linux 7.2 Kernel 2.4.7 - it denies connections other
from our router (i hope so) and runs apache 1.3.26, tomcat 4.0.2, php 4.0.1.
Can anyone help with a hint?
Mit freundlichem Gruß
Tel. : 0221/3771-210
FAX : 0221/3771-128
Web : http://www.staedtetag.de
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here