From owner-freebsd-security Thu Aug 23 3: 9:24 2001 Delivered-To: freebsd-security@freebsd.org Received: from terminus.dnttm.ro (terminus.dnttm.ro [193.226.98.11]) by hub.freebsd.org (Postfix) with ESMTP id E03B837B408 for ; Thu, 23 Aug 2001 03:09:17 -0700 (PDT) (envelope-from titus@edc.dnttm.ro) Received: from unix.edc.dnttm.ro (edc.dnttm.ro [193.226.98.104]) by terminus.dnttm.ro (8.9.3/8.9.3) with ESMTP id NAA28038 for ; Thu, 23 Aug 2001 13:09:11 +0300 Received: (from root@localhost) by unix.edc.dnttm.ro (8.11.4/8.11.2) id f7NA9BX80883 for freebsd-security@freebsd.org; Thu, 23 Aug 2001 13:09:11 +0300 (EEST) (envelope-from titus) Received: (from titus@localhost) by unix.edc.dnttm.ro (8.11.4/8.11.2av) id f7NA9Al80875 for freebsd-security@freebsd.org; Thu, 23 Aug 2001 13:09:10 +0300 (EEST) (envelope-from titus) Date: Thu, 23 Aug 2001 13:09:09 +0300 From: titus manea To: freebsd-security@freebsd.org Subject: Re: Compromised system. Message-ID: <20010823130909.A80836@unix.edc.dnttm.ro> References: <200108231554.LAA96346@corp.e-scape.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200108231554.LAA96346@corp.e-scape.net>; from stefanos@e-scape.net on Thu, Aug 23, 2001 at 11:54:30AM -0400 X-Virus-Scanned: by AMaViS perl-10 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org You may ls -F and then you will see ./ ../ . / The attacker maybe did a mkdir ". "; To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message