From owner-freebsd-security  Mon Mar  5 10:10: 0 2001
Delivered-To: freebsd-security@freebsd.org
Received: from tomahawk.SQUiSH.org (tomahawk.SQUiSH.org [216.55.63.252])
	by hub.freebsd.org (Postfix) with ESMTP id 4AAC437B719
	for <security@FreeBSD.ORG>; Mon,  5 Mar 2001 10:09:58 -0800 (PST)
	(envelope-from dce@squish.org)
Received: from SQUiSH.org (SQUiSH.org [216.55.63.252])
	by tomahawk.SQUiSH.org (8.9.3/8.9.3) with ESMTP id KAA07490
	for <security@FreeBSD.ORG>; Mon, 5 Mar 2001 10:20:11 -0800 (PST)
Date: Mon, 5 Mar 2001 10:20:11 -0800 (PST)
From: dce <dce@squish.org>
To: security@FreeBSD.ORG
Subject: 31337
Message-ID: <Pine.BSO.4.10.10103051008420.15904-100000@tomahawk.SQUiSH.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Hello,

I have noticed the following ports open on my FreeBSD 4.2-STABLE machine

31337/tcp  open        Elite
6667/tcp   open        irc

         
I have also noticed these open after CVSuping from 4.0-RELEASE to
4.2-STABLE... Is this normal? Has a rootkit been installed? Any
information provided is greatly appreciated.





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message