[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-security] Another Raq3 Hack
- Subject: RE: [cobalt-security] Another Raq3 Hack
- From: "Tony" <isplists@xxxxxxxxxxxx>
- Date: Thu, 15 Feb 2001 01:18:22 -0600
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
++Raq3 with all Patches:
+
+Ran Chkrootkit and got
+
+Checking `netstat'... INFECTED
+
+in.smb was enabled in inetd.conf
+
+Both init and in.smb in /usr/sbin had the same time stamp.
+
+Is it possible to plug this up without flattening the box?
Also found this on this Raq and not on any others:
/root/.la.pid
Anyone have any idea which process la is?