help analyzing an attack

Wed Apr 18 15:52:14 UTC 2007

On Tue, Apr 17, 2007 at 11:34:06PM -0400, Dave Cramer wrote:
> Someone managed to get into one of my machines. I caught it fairly  
> early. However I still don't know how he got root

Got any services running?  Apache, ftp, nfs, etc?  Running an up to date
distribution or a pretty old one?

--
Len Sorensen
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists