From owner-freebsd-security Tue Jun 29 7:29:57 1999 Delivered-To: freebsd-security@freebsd.org Received: from jade.chc-chimes.com (jade.chc-chimes.com [206.67.97.83]) by hub.freebsd.org (Postfix) with ESMTP id C2AAF15221 for ; Tue, 29 Jun 1999 07:29:51 -0700 (PDT) (envelope-from billf@jade.chc-chimes.com) Received: from localhost (billf@localhost) by jade.chc-chimes.com (8.8.8/8.8.8) with SMTP id KAA00830; Tue, 29 Jun 1999 10:33:39 -0400 (EDT) (envelope-from billf@jade.chc-chimes.com) Date: Tue, 29 Jun 1999 10:33:38 -0400 (EDT) From: Bill Fumerola To: "N.N.M" Cc: freebsd-security@FreeBSD.ORG Subject: Re: A strange process In-Reply-To: <19990629130132.96757.qmail@hotmail.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, 29 Jun 1999, N.N.M wrote: > Hi everybody, > > Any knows what the following process can mean? > > login -p zzzzzzzz > > I have it in the result of "ps -aux" entry with the owner of "root". It also > re-appears in a moment after being killed by me! What can it be? The password given at the command line, however login 'hides' that password in the process list so people snooping around don't catch it. - bill fumerola - billf@chc-chimes.com - BF1560 - computer horizons corp - - ph:(800) 252-2421 - bfumerol@computerhorizons.com - billf@FreeBSD.org - To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message