Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 01 Aug 2001 11:55:15 -0600
From:      Brett Glass <brett@lariat.org>
To:        "Maximum" <m-a-x-i-m-u-m@mail.ru>, freebsd-security@FreeBSD.ORG
Subject:   Re: Trojan injected in my Freebsd 4.1-RELEASE
Message-ID:  <4.3.2.7.2.20010801115333.0476d100@localhost>
In-Reply-To: <E15Rwv3-0000Ag-00@f4.mail.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
At 08:24 AM 8/1/2001, Maximum wrote:

>In one of shell script I'm talking about i found copyright mark "nrfbsdrk v0.1 by gREMLiNs".

The final letters of "nrfbsdrk" almost certainly stand for "FreeBSD rootkit."
I'd be interested in knowing what was exploited to install it. Could be BIND
or telnetd.

--Brett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.3.2.7.2.20010801115333.0476d100>