help analyzing an attack

[Jamon Camisso]

Lennart Sorensen wrote:
> On Tue, Apr 17, 2007 at 11:34:06PM -0400, Dave Cramer wrote:
>> Someone managed to get into one of my machines. I caught it fairly  
>> early. However I still don't know how he got root
> 
> Got any services running?  Apache, ftp, nfs, etc?  Running an up to date
> distribution or a pretty old one?

ssh
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists