[prev in list] [next in list] [prev in thread] [next in thread] 

List:       cobalt-users
Subject:    RE: security II
From:       "Darnell Gadberry" <darnell () binmedia ! com>
Date:       1998-11-23 17:22:33
[Download RAW message or body]

Christophe,

You should probably now assume that your RaQ has been completely compromised
and Trojan Horse programs may have been inserted in place of your normal
system utilities. It might be a really good idea to make a backup of all of
your user content and get instructions from Cobalt on how to refresh and
restore the base install on the RaQ. I understand they are working on a CD
ROM that would permit you to install a fresh image.

You should take a look at some of the security FAQs that exist on the web. A
good Linux-specific resource can be found at:
http://www.ssc.com/lj/issue22/1206.html

Pay particular attention to Tripwire - a utility designed to detect system
file tampering.

Good luck!

- darnell

> -----Original Message-----
> From: owner-cobalt-users@cobaltnet.com
> [mailto:owner-cobalt-users@cobaltnet.com]On Behalf Of Christophe
> Sent: Monday, November 23, 1998 5:58 AM
> To: cobalt-users@cobaltnet.com
> Subject: Re: security II
>
>
> >you may find what he did still in /root/.bash_history
>
>
>
> the file has been edited... :-(
>
> does anyone know how to disable ftp reverse-lookup?
>
> thank you,
> chris
>
> ______________________________________________________________________
>
>      Z a r c r o m    I n d u s t r i e s    C o r p o r a t i o n
>
           http://www.zarcrom.com (Web Hosting wholesaler).
______________________________________________________________________

[prev in list] [next in list] [prev in thread] [next in thread]