Security Incidents mailing list archives

eri?


From: fletcher () CS UTEXAS EDU (Fletcher Mattox)
Date: Fri, 28 Jan 2000 05:46:15 -0600


While doing a postmortem analysis of a compromised non-root account
on a linux machine, we found a program named "eri" in the accounting
logs.  It appeared immediately after gcc was run, so I assume it was
a compiled program.  Of course, "eri" could have been named at the
cracker's whim, but I am wondering if it is a known cracking tool.
Has anyone ever heard of it?

Thanks
Fletcher


Current thread: