Security Incidents mailing list archives

RE: OpenSSH anomaly


From: "GUSAIN,SUBODH (HP-Canada,ex1)" <subodh.gusain () hp com>
Date: Tue, 24 Feb 2004 13:34:30 -0500

Also, are you running an access control. sometimes the daemon user for sshd
expires resulting all sessions being terminated.

Subodh Gusain
HP-CANADA

-----Original Message-----
From: Benjamin Franz [mailto:snowhare () nihongo org]
Sent: Monday, February 23, 2004 1:24 PM
To: Will Tipton
Cc: incidents () securityfocus com
Subject: Re: OpenSSH anomaly


On Mon, 23 Feb 2004, Will Tipton wrote:

This sounds like an issue we had recently.  It turned out that the 
passwords had expired and that openssh is broken as far as dealing with 
it.  If this is the case, as console login should prompt you to change the

password.  Or, try a chage -l

Nope. But I discovered this morning as backups were attempting to run that
the filesystem apparently has corruption - I have a few files that
suddenly have apparent sizes and ownership info in the absurd range:

-rw-r--r--    1 2439249920 136118272 584782831260017978 Aug 14  2003
redhat-config-xfree86.mo

lrwxr-xr-x    1 543621120 1920139264       13 Nov 16 09:12 K50tux

I also discovered that my inode handlers are apparently leaking. This 
looks like a combination of kernel and/or filesystem problems.

-- 
Benjamin Franz



---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.securityfocus.com/sponsor/Astaro_incidents_040219
----------------------------------------------------------------------------

---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: