RE: [cobalt-security] Getting this after a clean / fresh re-install

["Nathan Kondra" <nathan@xxxxxxxxxxxxxxxx>]

I am confirming yes the Tux kit,

And under a day from Sun iso image

Nathan Kondra
Technical Coordinator
 
Think Profits.com Inc.
http://www.thinkprofits.com
 
Making The Internet Profitable... Together Since 1997


-----Original Message-----
From: cobalt-security-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx] On Behalf Of Jaana Jarve
Sent: October 1, 2003 9:28 AM
To: cobalt-security@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-security] Getting this after a clean / fresh
re-install


On Wed, 1 Oct 2003, Nathan Kondra wrote:

> I am getting this when I try to telnet into qube
>
> <snip>
> Cobalt Linux
> /dev/tux/backup/login: Bad address
> </snip>

goodness. fresh install? from what medium? you don't mean from backup by
any chance? if not, how long had the qube been up and connected before
you tried to log in?

> Then it sits there what is the problem.

/dev/tux seems to indicate the presence of the Tuxkit rootkit. more info
here: http://mel.ini2.net/p/tuxkit-analysis.txt


rgds,
netcat

_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security