khan rohail wrote: > I am new to this, I searched for the following errors > but wasnt pointed to something specific. I want to > know whether my machine was hacked or there is > something. > I did check my cron jobs and there is nothing which is > should start the httpd server. > > If I am not mistaken the ador worm does the same thing > at 4:02 am but I checked that too throug ./adorefind > but negative. > > Need some help here from gurus! > > > Tue Jun 25 04:02:04 2002] [warn] child process 6383 > did not exit, sending another SIGHUP
This looks like the Apache chunking vulnerability being exploited. Read the article about GOBBLES's exploit on http://securityfocus.com for more. What version of Apache are you running? -- Josh Glover <[EMAIL PROTECTED]> Associate Systems Administrator INCOGEN, Inc.
