RE: [cobalt-security] Qubes - hacked

["Randy Russell" <rrussell@xxxxxxxxxxxxxx>]

I tried it again. restored another Qube3 and this is what I am getting after
Qube3-All-Security-4.0.1-14559.

I get the following error in the Admin GUI. The GUI is now broken.

Fatal error: Call to undefined function: cce_new() in
/usr/sausalito/ui/libPhp/CceClient.php on line 28

What went wrong. I didn't see this before.  In the telnet session, I am
getting this mail message:

>From root  Wed Apr 30 21:45:00 2003
Date: Wed, 30 Apr 2003 21:45:00 -0700
From: root (Cron Daemon)
To: root
Subject: Cron <root@mail>    /usr/sbin/swatch -c /etc/swatch.conf
X-Cron-Env: <SHELL=/bin/sh>
X-Cron-Env: <HOME=/root>
X-Cron-Env: <PATH=/usr/bin:/bin>
X-Cron-Env: <LOGNAME=root>

/usr/sbin/swatch: error in loading shared libraries: libcce.so.0: cannot
open sh
ared object file: No such file or directory

I am living in Qube3 Hell!

:-)



-----Original Message-----
From: cobalt-security-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx]On Behalf Of Michael
Stauber
Sent: Wednesday, April 30, 2003 7:32 PM
To: cobalt-security@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-security] Qubes - hacked


Hi Randy,

> The Qube3-All-Security-4.0.1-13453.pkg via download to the GUI did a force
> reboot on the Qube3.

Yes. If you had installed the package from the command line, then a reboot
is
optional. That's why I asked.

> Reboot the box and I can't get to the GUI at all. Getting ready to
> try to re-install it again. Getting tired of it.

Yeah, that might unfortunately be the best - if not only - approach. One
could
invest some time to troubleshoot the box through the serial console, but I
wonder if it's worth the efforts at that point.

--

With best regards,

Michael Stauber

_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security