[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] RE: [cobalt-security] Another Raq3 Hack
- Subject: [cobalt-users] RE: [cobalt-security] Another Raq3 Hack
- From: "Tony" <isplists@xxxxxxxxxxxx>
- Date: Mon Feb 26 19:07:56 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
++Raq3 with all Patches:
+
+Ran Chkrootkit and got
+
+Checking `netstat'... INFECTED
+
+in.smb was enabled in inetd.conf
+
+Both init and in.smb in /usr/sbin had the same time stamp.
+
+Is it possible to plug this up without flattening the box?
Also found this on this Raq and not on any others:
/root/.la.pid
Anyone have any idea which process la is?