Security Incidents mailing list archives

Re: rooted


From: kugjon () PANTEION GR (John Kougoulos)
Date: Thu, 24 Feb 2000 16:44:18 +0200


In poking around that server we also found b00ger-rpc listed in inetd.conf
and running as pop2 ??? (Does b00ger take anything other than stdin?),
something in tmp called jrnt1.2 and broadscan.

This explains why I see a lot of probes for port 109 the last few
weeks...

John


Current thread: