Your message dated Fri, 25 Nov 2005 22:50:43 -0800 with message-id <[EMAIL PROTECTED]> and subject line Bug#327728: chkrootkit: False positive with reaim has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 11 Sep 2005 18:24:59 +0000 >From [EMAIL PROTECTED] Sun Sep 11 11:24:59 2005 Return-path: <[EMAIL PROTECTED]> Received: from 4cust215.vr2.dca8.broadband.uu.net (sparky) [63.13.156.215] (mail) by spohr.debian.org with esmtp (Exim 3.36 1 (Debian)) id 1EEWVf-0007Mz-00; Sun, 11 Sep 2005 11:24:59 -0700 Received: from rockwlrs by sparky with local (Exim 3.36 #1 (Debian)) id 1EEWVa-0002G5-00; Sun, 11 Sep 2005 14:24:54 -0400 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Nathan Summers <[EMAIL PROTECTED]> To: Debian Bug Tracking System <[EMAIL PROTECTED]> Subject: chkrootkit: False positive with reaim X-Mailer: reportbug 3.17 Date: Sun, 11 Sep 2005 14:24:51 -0400 Message-Id: <[EMAIL PROTECTED]> Sender: Nathan Summers <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Level: X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02 Package: chkrootkit Version: 0.45-1 Severity: normal With reaim version 0.8-3, chkrootkit reports that the bindshell rootkit is present with infected port 5190. This port is used by the reaim AIM proxy. -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (500, 'testing'), (200, 'stable'), (101, 'unstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.8 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages chkrootkit depends on: ii binutils 2.16.1-2 The GNU assembler, linker and bina ii debconf 1.4.58 Debian configuration management sy ii libc6 2.3.5-6 GNU C Library: Shared libraries an ii net-tools 1.60-15 The NET-3 networking toolkit chkrootkit recommends no packages. -- debconf information excluded --------------------------------------- Received: (at 327728-done) by bugs.debian.org; 26 Nov 2005 06:51:39 +0000 >From [EMAIL PROTECTED] Fri Nov 25 22:51:39 2005 Return-path: <[EMAIL PROTECTED]> Received: from doit.org ([199.184.188.17] helo=maui.doit.org ident=postfix) by spohr.debian.org with esmtp (Exim 4.50) id 1EftuN-0000Du-Iu for [EMAIL PROTECTED]; Fri, 25 Nov 2005 22:51:39 -0800 Received: from localhost.localdomain (c-24-20-136-228.hsd1.or.comcast.net [24.20.136.228]) by maui.doit.org (Postfix) with ESMTP id 29571CD914 for <[EMAIL PROTECTED]>; Fri, 25 Nov 2005 22:51:39 -0800 (PST) Received: by localhost.localdomain (Postfix, from userid 1000) id 23C92E4713; Fri, 25 Nov 2005 22:50:43 -0800 (PST) To: [EMAIL PROTECTED] Subject: Re: Bug#327728: chkrootkit: False positive with reaim From: lantz moore <[EMAIL PROTECTED]> Date: Fri, 25 Nov 2005 22:50:43 -0800 In-Reply-To: <[EMAIL PROTECTED]> (Nathan Summers's message of "Sun, 11 Sep 2005 14:24:51 -0400") Message-ID: <[EMAIL PROTECTED]> User-Agent: Gnus/5.090016 (Oort Gnus v0.16) XEmacs/21.4 (Jumbo Shrimp) References: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Level: X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_30,HAS_BUG_NUMBER, RCVD_IN_SORBS autolearn=no version=2.60-bugs.debian.org_2005_01_02 Nathan Summers <[EMAIL PROTECTED]> writes: > With reaim version 0.8-3, chkrootkit reports that the bindshell rootkit > is present with infected port 5190. This port is used by the reaim AIM > proxy. this bug was "fixed" (reaim was added to the list of known false-positives) with the 0.46-1 upload. -l -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]