It may not be the only way, but its the best way...
I had that happen on a redhat6.2 server because of the default wu-ftp, it is
easily hacked for a root compromise...
I pulled the plug and reinstalled...
because you never know what they have put on your system one of a
crackers favorite tricks is to replace system tools with cracked versions
that open a back door on your system
so you just don't know if you will be easy to compromise again..
reinstall and update, its the safest alternative...
and load as a bare minimum, pmfirewall (or a iptables alternative.) and
portsentry...
then if you want even better security, install Tripwire and possible
Snort...(which does incidently run better on a seperate box but can run on
the same one..)
rgds
Frank
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Brandon Caudle
Sent: Thursday, 30 August 2001 6:16 AM
To: [EMAIL PROTECTED]
Cc: Suse; [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: [newbie] Re: /bin/login missing
Is that the only way?
Brandon Caudle
--
15yr Old Avid Unix User (HP-UX,FreeBSD,Linux)
Larkhaven Golf Course
Charlotte, NC
There cannot be a crisis next week. My schedule is already full. -- Henry
Kissinger
- Original Message -
From: Taylor, ForrestX [EMAIL PROTECTED]
To: [EMAIL PROTECTED]; Suse [EMAIL PROTECTED];
[EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Sent: Wednesday, August 29, 2001 6:01 PM
Subject: RE: /bin/login missing
Hey Everyone,
Recently, I have been unable to telnet into my machine (Suse
7.2). This is
because /bin/login is missing, (I am very luscious about
this) So how do I
go about replacing it?
Thanks,
Brandon Caudle
--
15yr Old Avid Unix User (HP-UX,FreeBSD,Linux)
Larkhaven Golf Course
Charlotte, NC
There cannot be a crisis next week. My schedule is already
full. -- Henry
Kissinger
You have been hacked, and you must format and reinstall. When you
install,
get a firewall setup (Red Hat 7.1 has an easy firewall setup during
install).
Forrest
___
Guinness-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/guinness-list
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
