Date: Wed, 05 Aug 1998 17:22:15 -0600 From: Brett Glass <brett@lariat.org> To: Ollivier Robert <roberto@keltia.freenix.fr>, security@FreeBSD.ORG Subject: Re: Does this mean we have another breakin? Message-ID: <199808052327.RAA00806@lariat.lariat.org> In-Reply-To: <19980805234700.A23220@keltia.freenix.fr> References: <199808051643.KAA04281@lariat.lariat.org> <199808051643.KAA04281@lariat.lariat.org>
next in thread | previous in thread | raw e-mail | index | archive | help
The MD5's are the same. Must be a VM bug. Maybe the same one that's crashing us left and right. --Brett At 11:47 PM 8/5/98 +0200, Ollivier Robert wrote: >According to Brett Glass: >> setuid diffs: >> 9c9 >> < -r-xr-sr-x 2 root tty 225280 Jul 22 02:13:13 1998 /sbin/restore >> --- >> > -r-xr-sr-x 2 root tty 225280 Aug 4 15:00:14 1998 /sbin/restore > >Verify, if you have them, the MD5 checksums. If they don't have changed, >you've been hit by a VM bug where mod. time is changed even if the >executable has only been loaded. >-- >Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- roberto@keltia.freenix.fr >FreeBSD keltia.freenix.fr 3.0-CURRENT #62: Mon Jul 27 20:47:08 CEST 1998 > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199808052327.RAA00806>