Security Incidents mailing list archives

Re: SSH compiled with backdoor

From: james () securityfocus com, "[no-spam-plz]"@fooff99.com
Date: 2 Sep 2005 08:04:51 -0000

it's quite interesting. Although i can't find any reason for these commands. 

mkdir /lib/java
cp /usr/sbin/sshd a
mv a /lib/java

It might be that he wants to come back and do something with it. 
Anyone? 

(btw, why not delete pico from your system and intall vi(m)... he might get pissed and leave. )

cheers.

Current thread:

Re: SSH compiled with backdoor Peter Kosinar (Sep 01)
- Incident legal plan?? Jason Burton (Sep 02)
  - RE: Incident legal plan?? dave kleiman (Sep 03)
  - RE: Incident legal plan?? Michele Jordan (Sep 07)
- <Possible follow-ups>
- Re: SSH compiled with backdoor [no-spam-plz] (Sep 02)
- RE: SSH compiled with backdoor Chain, David (NA ITRC Team Lead) (Sep 02)