Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 Jul 1997 20:22:21 -0400
From:      "Gary Palmer" <gpalmer@FreeBSD.ORG>
To:        Vincent Poy <vince@mail.MCESTATE.COM>
Cc:        security@FreeBSD.ORG, "[Mario1-]" <mario1@PrimeNet.Com>, JbHunt <johnnyu@accessus.net>
Subject:   Re: security hole in FreeBSD 
Message-ID:  <3749.870135741@orion.webspan.net>
In-Reply-To: Your message of "Mon, 28 Jul 1997 03:19:55 PDT." <Pine.BSF.3.95.970728031228.3844A-100000@mail.MCESTATE.COM> 

next in thread | previous in thread | raw e-mail | index | archive | help
Vincent Poy wrote in message ID
<Pine.BSF.3.95.970728031228.3844A-100000@mail.MCESTATE.COM>:
> 	Saw the user on irc posting the password of earth with the login
> name root.  Any ideas?

Take the machine offline and reinstall the *ENTIRE* thing. You have
been root kitted, which allows remote access & hiding of remote
access, without any daemons needed to be running.

Gary
--
Gary Palmer                                          FreeBSD Core Team Member
FreeBSD: Turning PC's into workstations. See http://www.FreeBSD.ORG/ for info



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3749.870135741>