[cobalt-security] Re: cobalt-security digest, Vol 1 #1208 - 2 msgs

[John K Mitchell <johnm@xxxxxxxxxxxxxxxxxxxx>]

> Date: Sun, 1 Jun 2003 00:46:29 -0700 (PDT)
> From: Barbara <thebizworkers@xxxxxxxxx>
> To: Security <cobalt-security@xxxxxxxxxxxxxxx>
> Subject: [cobalt-security] RaQ4 md5sum for Sendmail
> Reply-To: cobalt-security@xxxxxxxxxxxxxxx
>
> Hi Guys,
>
> Can someone share a few md5sum's values for some files
> on a fully patched RaQ4..?  I'm really interested in
> the sendmail value on a fully patched RaQ4..
>
> md5sum /usr/sbin/sendmail
>
> I have a few md5sum's that don't match between two
> RaQ4's -but I'm not sure if it's because of patches or
> what.. One box is fully patched, while the other one
> isn't (except with the critical patches)..
>
> Do any of these match what you guys have..?
>
> --RaQ4 #1--
>
> /bin/login
> -rwxr-xr-x   1 root   root   21672 Jun 20  2000 login
> a6b700aeabfb87115b3cc1a47a5a19e1
>
> /bin/ls
> -rwxr-xr-x   1 root   root   50148 Sep  8  1999 ls
> f482ae701e46005a358a01c139f1ae74
>
> /usr/bin/dir
> -rwxr-xr-x   1 root   root   50148 Sep  8  1999 dir
> b1713d95fd6664c216ccd113cd1c366a
>
> /usr/bin/du
> -rwxr-xr-x   1 root   root   21716 Sep  8  1999 du
> 5b1e21c2ec8de4676d296df4aee68dbb
>
> /usr/bin/install
> -rwxr-xr-x   1 root   root   31424 Sep  8  1999
> install
> 9d087187eca3a0c682e7256c308283ae
>
>
> --RaQ4 #2 Fully Patched--
>
> /bin/login
> -rwxr-xr-x    1 root   root   21672 Jul 30  2002 login
> 841027f45253feb538d56f23a88a8698
>
> /bin/ls
> -rwxr-xr-x    1 root   root   47024 Aug 30  2002 ls
> 274a2af5d94910bcdb467f839153fe80
>
> /usr/bin/dir
> -rwxr-xr-x    1 root   root   47024 Aug 30  2002 dir
> 6d63aa5b832a5887689db318b6bc5543
>
> /usr/bin/du
> -rwxr-xr-x    1 root   root   26448 Aug 30  2002 du
> 8588b5728d0d1cb760f0b1e6c7c37642
>
> /usr/bin/install
> -rwxr-xr-x    1 root  root   42288 Aug 30  2002
> install
> d69dcc4ec0cddd6b75ef0ab03f1bb125
>
>
> Thanks in advance if anyone can share their mdsum
> values for the above files.. esp on an up-to-date
> RaQ4..
>
> Sincerely,
> Barbara

I've got [root admin]# md5sum /usr/sbin/sendmail
d7568187702a90dfc8a81fd6edc7e680  /usr/sbin/sendmail
[root admin]# md5sum /bin/login
a6b700aeabfb87115b3cc1a47a5a19e1  /bin/login
[root admin]# md5sum /bin/ls
f482ae701e46005a358a01c139f1ae74  /bin/ls
[root admin]# md5sum /usr/bin/dir
b1713d95fd6664c216ccd113cd1c366a  /usr/bin/dir
[root admin]# md5sum /usr/bin/du
8588b5728d0d1cb760f0b1e6c7c37642  /usr/bin/du
[root admin]# md5sum /usr/bin/install
d69dcc4ec0cddd6b75ef0ab03f1bb125  /usr/bin/install
[root admin]# ls -aol /usr/bin/install
-rwxr-xr-x    1 root        42288 Aug 30  2002 /usr/bin/install
[root admin]# ls -aol /usr/bin/du
-rwxr-xr-x    1 root        26448 Aug 30  2002 /usr/bin/du
[root admin]# ls -aol /usr/bin/dir
-rwxr-xr-x    1 root        47024 Aug 30  2002 /usr/bin/dir
[root admin]# ls -aol /bin/ls
-rwxr-xr-x    1 root        47024 Aug 30  2002 /bin/ls
[root admin]# ls -aol /bin/login
-rwxr-xr-x    1 root        21672 Jul 30  2002 /bin/login

Hope this helps.

Regards

John
--
John K Mitchell
Forest Software Ltd
Web sites for the smaller business and charity.
Tel : 0870 747 4943
Fax : 0870 747 4942