Date: Thu, 11 Sep 2003 10:57:44 +0400 From: Alex Povolotsky <tarkhil@webmail.sub.ru> To: security@freebsd.org Subject: chkrotkit 4.1 and FreeBSD 4.5 Message-ID: <20030911105744.240e66be.tarkhil@webmail.sub.ru>
next in thread | raw e-mail | index | archive | help
Hello! I've found that on two FreeBSD 4.5-RELEASE boxes chkrootkit finds: Checking `chfn'... INFECTED Checking `chsh'... INFECTED Checking `date'... INFECTED Checking `ls'... INFECTED Checking `ps'... INFECTED recompiling, say, ls from souces didn't help. False positive or source changed as well? -- Alex.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030911105744.240e66be.tarkhil>