Date: Thu, 26 Dec 1996 09:03:23 -0500 From: Matthew Hagerty <matthew@internet1.net> To: questions@freebsd.org Subject: Init missing Message-ID: <32C285AB.132F@internet1.net>
next in thread | raw e-mail | index | archive | help
Greetings, It seems one of my FreeBSD boxes was hacked :( When I came in this morning, the screen on my 2.1.6 box was scrolling messages similar to this: Dec 25 02:08:50 ns1 statd[150]: attempt to create "/var/statmon/sm//../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../..//../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../tmp/.nfs09 D H $ $ $ $ ` O * õ * * * # # ü P*` c 6 ý ) ý # # ; # XbinXsh tirdwr " Does anyone know what kind of attack this is and what I should be looking for and how to prevent it in the future? Also, when I try to boot my FreeBSD box, I get an error: init not found. panic. reboot in progress... Is there any way I can start the system or mount the file systems to see what was damaged and/or recover any files? Thank you for your time, Matthew Hagerty matthew@internet1.net
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?32C285AB.132F>