[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] Another Raq3 Hack
- Subject: [cobalt-security] Another Raq3 Hack
- From: "Tony" <isplists@xxxxxxxxxxxx>
- Date: Wed, 14 Feb 2001 22:45:50 -0600
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Raq3 with all Patches:
Ran Chkrootkit and got
Checking `netstat'... INFECTED
in.smb was enabled in inetd.conf
Both init and in.smb in /usr/sbin had the same time stamp.
Is it possible to plug this up without flattening the box?