[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Gnumed-devel] URGENT - hherb.com hacked
|
From: |
Roberto Mello |
|
Subject: |
Re: [Gnumed-devel] URGENT - hherb.com hacked |
|
Date: |
Sun, 21 Nov 2004 00:57:04 -0700 |
|
User-agent: |
Mutt/1.5.6+20040907i |
On Sun, Nov 21, 2004 at 04:22:45PM +1100, Horst Herb wrote:
> hherb.com has been hacked, a root kit installed.
> This happened probably on 15th of November (at least some of the kitted files
> like rm, chmod, login, ifconfig etc. bear such time stamp and log entries
> before that date look unsuspicious)
What kernel was the machine running?
What version of ssh?
What other daemons were running and publicly accessible?
-Roberto
--
Roberto Mello
Software Engineer, Novell Inc.
Math problems? Call 1-800-10*(24+13)-(64-16)/2^14E2.