Security Incidents mailing list archives

Re: OpenSSH anomaly


From: Benjamin Franz <snowhare () nihongo org>
Date: Mon, 23 Feb 2004 10:23:39 -0800 (PST)

On Mon, 23 Feb 2004, Will Tipton wrote:

This sounds like an issue we had recently.  It turned out that the 
passwords had expired and that openssh is broken as far as dealing with 
it.  If this is the case, as console login should prompt you to change the 
password.  Or, try a chage -l

Nope. But I discovered this morning as backups were attempting to run that
the filesystem apparently has corruption - I have a few files that
suddenly have apparent sizes and ownership info in the absurd range:

-rw-r--r--    1 2439249920 136118272 584782831260017978 Aug 14  2003 redhat-config-xfree86.mo

lrwxr-xr-x    1 543621120 1920139264       13 Nov 16 09:12 K50tux

I also discovered that my inode handlers are apparently leaking. This 
looks like a combination of kernel and/or filesystem problems.

-- 
Benjamin Franz



---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.securityfocus.com/sponsor/Astaro_incidents_040219
----------------------------------------------------------------------------


Current thread: