[Date Prev][Date Next] [Thread Prev][Thread Next]
[Thread Index]
[Date Index]
[Author Index]
Re: URGENT: cannot able to change the password attacked by lion..
- From: Kiran Kumar M <kiran pol net in>
- To: redhat-list redhat com
- Subject: Re: URGENT: cannot able to change the password attacked by lion..
- Date: Fri, 1 Jun 2001 03:31:54 +0530 (IST)
Thanks for your mail. I got the temp. solution for my problem. I am still
analysing the machine.
Thanks,
Kiran
On Thu, 31 May 2001, Jonathan Wilson wrote:
> Sounds like you've got a root kit installed.
>
> You're going to have to reinstall all critical packages off of your RedHat cd
>
> If I were you I'd download a rootkit detector like Coroner's Toll Kit.
>
> Also, please take that box off the Net until you have it secured.
>
> The best thing to do is wipe it clean and start from scratch - otherwise, you can never really be sure you got the system cleaned up enough.
>
> Also, do you know how you got cracked? If not, you're likely to still have the same hole, and you'll just be cracked again.
>
> At 03:08 AM 6/1/2001 +0530, you wrote:
>
> >Hi,
> >
> >I was attacked by hacker, and I cleaned up whereever illegal files are
> >there.
> >
> >Now I am unable to change the password, and not able to use userdel and
> >useradd commands.
> >
> >Can you any one please suggest me how can I use those commands.
> >
> >The error I am getting while using passwd command is:
> >
> >passwd: Critical error - Immediate abort
> >
> >while using userdel :
> >
> >userdel: Cann't open passwd file
> >
> >(I checked the permissions of passwd, shadow, group, all are seems to be
> >normal)
> >
> >Please suggest me what to do now.. Its very urgent..
> >
> >Thanks,
> >Kiran
> >
> >
> >
> >
> >
> >
> >_______________________________________________
> >Redhat-list mailing list
> >Redhat-list redhat com
> >https://listman.redhat.com/mailman/listinfo/redhat-list
>
> ----------------------------------------------------
> Jonathan Wilson
> System Administrator
>
> Cedar Creek Software http://www.cedarcreeksoftware.com
> Central Texas IT http://www.centraltexasit.com
>
>
>
> _______________________________________________
> Redhat-list mailing list
> Redhat-list redhat com
> https://listman.redhat.com/mailman/listinfo/redhat-list
>
[Date Prev][Date Next] [Thread Prev][Thread Next]
[Thread Index]
[Date Index]
[Author Index]