[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] bindshell'... INFECTED (PORTS: 1524 31337)

Subject: Re: [cobalt-security] bindshell'... INFECTED (PORTS: 1524 31337)
From: Brian Rahill <cobalt@xxxxxxxxxxxxxxxxxxxxxxx>
Date: Mon, 10 Dec 2001 09:30:13 -0500
List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>

At 09:34 PM 12/9/01 +0100, you wrote:

bindshell'... INFECTED (PORTS:  1524 31337)
>
> I could need some help with what this exactly means ? Also how to trace it
> and fix it..

Port 31337 is likely just a false positive from Portsentry (assuming youhave it running). Don't know about 1524 though. Try shutting downPortsentry and running chkrootkit again.

If you search www.deja.com for "chkrootkit 31337 bindshell portsentry"you'll see lots of discussion about this.


Brian

Follow-Ups:
- Re: [cobalt-security] bindshell'... INFECTED (PORTS: 1524 31337)
  - From: Michael Stauber

References:
- [cobalt-security] bindshell'... INFECTED (PORTS: 1524 31337)
  - From: Kai r. s., euroweb as
- Re: [cobalt-security] bindshell'... INFECTED (PORTS: 1524 31337)
  - From: Michael Stauber

Prev by Date: Re: SV: [cobalt-security] bindshell'... INFECTED (PORTS: 1524 31337)
Next by Date: Re: [cobalt-security] bindshell'... INFECTED (PORTS: 1524 31337)
Previous by thread: Re: SV: [cobalt-security] bindshell'... INFECTED (PORTS: 1524 31337)
Next by thread: Re: [cobalt-security] bindshell'... INFECTED (PORTS: 1524 31337)

Sun Cobalt Security Message Index

Sun Cobalt Security Thread Index