[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] 'proftpd-inetd appears to be from newer version' message (cross posted)
- Subject: Re: [cobalt-security] 'proftpd-inetd appears to be from newer version' message (cross posted)
- From: Gossi The Dog <gossi@xxxxxxxxxxxxxx>
- Date: Thu, 12 Oct 2000 23:29:01 +0100 (BST)
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
On Thu, 12 Oct 2000, Kevin D wrote:
> I have recently noticed the following entry in my Messages log:
>
> run-time scoreboard file '/var/run/proftpd/proftpd-inetd' appears to be from a newer version of proftp
>
> Is this something that a recent cobalt patch has caused, or is this evidence of a hack? I have not noticed any strange activity on my server, and a quick scan of recent FTP connections via the 'secure' log shows no foreign IP addresses (it's a pretty low traffic server).
I've got the same problem on my RaQ, and I'm using manually compiled
proftpd 1.2.0rc2. I've not got around to looking at why it's happening
yet, but it doesn't appear to be anything dodgy (security wise).
Oh, and remember that text logs can be altered.