Security Incidents mailing list archives

Re: RH6 boxes cracked


From: "Tansey, Don" <hyghlander () MINDSPRING COM>
Date: Wed, 3 Jan 2001 14:08:29 -0500

It could be that I have a death grip on the obvious here, but have you tried replacing su?

Although it may not be practicable, IMHO you may want to back the system up for forensic puporses and reinstall from 
clean sources.

I would suspect that su has been trojaned.

Good Luck,

Don


Current thread: