Re: Hacked Servers

2001-12-04 Thread Robert Cross
mysql at hotchilli.co.uk wrote: >We have 2 Redhat 6.1 servers and MySQL 3.22.32 and both boxes >appear to have been hacked on Friday last and MYSQL client just hangs >when connecting to the localhost MYSQL server. >MySQL is running on both boxes and suffer the same problems. >We have Intrusion s

Re: Hacked Servers

2001-12-03 Thread Philip Molter
On Mon, Dec 03, 2001 at 05:25:38PM -, [EMAIL PROTECTED] wrote: : Hi : : We have 2 Redhat 6.1 servers and MySQL 3.22.32 and both boxes : appear to have been hacked on Friday last and MYSQL client just hangs : when connecting to the localhost MYSQL server. : : MySQL is running on both boxes an

Re: Hacked Servers

2001-12-03 Thread Kevin Whitney
Been there too. Sounds like a 'script kiddy'. You should check your hosts.allow/deny, then firewall software configuration (ipchains?) files. That MIGHT get you into a functional situation. Also, programs like 'ls', ps, netstat ,etc have been replaced on your system, and you won't be able

RE: Hacked Servers

2001-12-03 Thread Joe Kaiping
the exploit via http://www.incidents.org. Best of luck! -Joe > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] > Sent: Monday, December 03, 2001 10:26 AM > To: [EMAIL PROTECTED] > Subject: Hacked Servers > > > Hi > > We have 2 Redhat 6.1

Hacked Servers

2001-12-03 Thread mysql
Hi We have 2 Redhat 6.1 servers and MySQL 3.22.32 and both boxes appear to have been hacked on Friday last and MYSQL client just hangs when connecting to the localhost MYSQL server. MySQL is running on both boxes and suffer the same problems. We also have to use kill -9 pid number to kill the s