Re: [TCLUG:22365] Hacked

[Ben Kochie <ben@nerp.net>]

probably wu-ftpd, as adam mentioned.. there has been a rash of wu-ftpd
related exploits, i saw an advisory a couple weeks ago on caldera

Thank You,
        Ben Kochie (ben@nerp.net)

*-----------------------*  [ - * - * - * - * - * - * - * - ]
| Unix/Linux Consulting |  [ Haiku Error Message:          ]
|  PC/Mac Repair        |  [  Chaos reigns within.         ]
|   Networking          |  [  Reflect, repent, and reboot. ]
| http://nerp.net       |  [  Order shall return.          ]
*-----------------------*  [ - * - * - * - * - * - * - * - ]

 "Unix is user friendly, Its just picky about its friends."

On Sun, 8 Oct 2000, Brian wrote:

> My system was hacked last night,  I was shut down from 10 pm until about
> 9 this morning, when I rebooted I had a new account called pbadmin on my
> login screen, before I just blow this acount away I would like to find
> out how he got into my system.  Any suggestions on how to back track
> him?
>   I'm running caldera 2.4edesktop, with a dsl connection through a cisco
> 675 and a netgear RT311 router.
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> For additional commands, e-mail: tclug-list-help@mn-linux.org
>