Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 Jun 1999 07:19:57 -0400 (EDT)
From:      Steve Hovey <shovey@buffnet.net>
To:        Jerry Raynor <jerryr@ComCAT.COM>
Cc:        questions@FreeBSD.ORG
Subject:   Re: HELP HACKER!!!
Message-ID:  <Pine.BSF.4.05.9906230718570.13422-100000@buffnet11.buffnet.net>
In-Reply-To: <Pine.GSO.4.02A.9906222003440.7244-100000@uw>

next in thread | previous in thread | raw e-mail | index | archive | help

They likely put in some suid program changes to get root again, using a
regular account or other means, without  having to know root password.

You are best off reinstalling freebsd, and then reinstalling your
applications (and/or doing a tape restore - being sure NOT to restore any
system or suid root programs)

On Tue, 22 Jun 1999, Jerry Raynor wrote:

> I caught someone who had just got in and setup a user account!!  hwo di I
> find out how they got it????  This is my first encounter with this, what
> steps should I take??  Thanks!!  I'm useing FreeBSD-2.2.5-R  I've changed
> my password and root's password already
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9906230718570.13422-100000>