Security Incidents mailing list archives

Re: strange telnet behavior


From: Gideon Lenkey <glenkey () infotech-nj com>
Date: Wed, 20 Feb 2002 23:41:21 -0500 (EST)

On Tue, 19 Feb 2002, Bryan Andersen wrote:

/* Make a backup. wipe and reload.  Then restore your data only.
/* It has been rooted.  Telnet should not be doing that at all.

You really don't have to wipe and reload to recover from this root kit.
It really doesn't change much. See the instructions in the archive:

        http://online.securityfocus.com/archive/75/249597

--Gideon

*  Gideon J. Lenkey, CISSP     *    PGP Key ID 0x92556BEC *
* InfoTech Associates, Inc.    *         pgp.mit.edu      *



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: