Package: chkrootkit Version: 0.44-2 Severity: normal Tags: patch The default install of bitlbee puts into inetd.conf: 6667 stream tcp nowait bitlbee /usr/sbin/tcpd /usr/sbin/bitlbee
which matches the LPD worm regexp of "^666". I'm not sure if the "LPD worm" also uses some of the 666* ports, but in case it does not, the regexp should be changed to "^666\s" to avoid this false positive. -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (800, 'unstable') Architecture: i386 (x86_64) Kernel: Linux 2.6.12-vs2.0-rc4 Locale: LANG=C, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Versions of packages chkrootkit depends on: ii binutils 2.15-6 The GNU assembler, linker and bina ii debconf 1.4.30.13 Debian configuration management sy ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an ii net-tools 1.60-10 The NET-3 networking toolkit -- debconf information excluded -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]