[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] RAQ's in UK hacked



On Thu, 8 Feb 2001, Steve Bassi wrote:

> Hi
> 
> Many of our RAQ's seem to have been hacked despite having installed the
> recent updates.
> 
> Anyone on this list been hacked ?
> 
> This is a recent post to our UK2 group (below) - anyone on the list with
> other suggestions o can help would be much appreciated
> 
> Rgds
> 
> Steve Bassi
> 
> =======================
> Yes I do mean machines have been compromised.
> 
> To check to see if you have been the target this is what I suggest.
> 
> check in the /lib/security/.config directory (If you have one)
> on mine theres a rootkit in there.

almost certainly due to:

http://www.safermag.com/html/safer21/alerts/28.html