Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 Sep 2001 09:12:28 -0700
From:      Rob <europax@home.com>
To:        ybbor@freedom.net
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: Freebsd being hacked
Message-ID:  <3BAB66EB.2C80217B@home.com>
References:  <20010921160628.5AD2337B41A@hub.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
> ybbor@freedom.net wrote:
> 
> Hello,
> 
> I have a Breebsd server.  It was running freebsd 3.x(not exactly sure)
> and last week somone used that telnet exploit.  so i ran that patch on
> your site.  then i downloaded the freebsd 4.4 iso and upgraded my
> system.
> 
> Today i try to log in to my computer and i can't telnet in to it.  So
> i went to the box, and i can't log in to it.  on the screen it says
> there was an 'su pop to toor'.  and that the kernel log was full.  it
> looks like i was hacked, so i unpluged the comptuer from the network
> and now i don't know what to do.
> 
> how do i log in to a comptuer if someone changed the root password and
> disabled every other account?
> 
> thanks
> -Robby Ticknor
> 
> ________________________________________________________________________
> 
> Protect your privacy! - Get Freedom 2.0 at http://www.freedom.net

I'd reinstall the OS from an ISO disk.  Others with more experience in
this might have a better solution.

Rob.
-- 
The Numeric Python EM Project

www.members.home.net/europax

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3BAB66EB.2C80217B>