Your message dated Fri, 25 Nov 2005 22:50:43 -0800
with message-id <[EMAIL PROTECTED]>
and subject line Bug#327728: chkrootkit: False positive with reaim
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 11 Sep 2005 18:24:59 +0000
>From [EMAIL PROTECTED] Sun Sep 11 11:24:59 2005
Return-path: <[EMAIL PROTECTED]>
Received: from 4cust215.vr2.dca8.broadband.uu.net (sparky) [63.13.156.215] 
(mail)
        by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
        id 1EEWVf-0007Mz-00; Sun, 11 Sep 2005 11:24:59 -0700
Received: from rockwlrs by sparky with local (Exim 3.36 #1 (Debian))
        id 1EEWVa-0002G5-00; Sun, 11 Sep 2005 14:24:54 -0400
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Nathan Summers <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: chkrootkit: False positive with reaim
X-Mailer: reportbug 3.17
Date: Sun, 11 Sep 2005 14:24:51 -0400
Message-Id: <[EMAIL PROTECTED]>
Sender: Nathan Summers <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
        autolearn=no version=2.60-bugs.debian.org_2005_01_02

Package: chkrootkit
Version: 0.45-1
Severity: normal

With reaim version 0.8-3, chkrootkit reports that the bindshell rootkit
is present with infected port 5190.  This port is used by the reaim AIM
proxy.

-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'stable'), (101, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.8
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages chkrootkit depends on:
ii  binutils                      2.16.1-2   The GNU assembler, linker and bina
ii  debconf                       1.4.58     Debian configuration management sy
ii  libc6                         2.3.5-6    GNU C Library: Shared libraries an
ii  net-tools                     1.60-15    The NET-3 networking toolkit

chkrootkit recommends no packages.

-- debconf information excluded

---------------------------------------
Received: (at 327728-done) by bugs.debian.org; 26 Nov 2005 06:51:39 +0000
>From [EMAIL PROTECTED] Fri Nov 25 22:51:39 2005
Return-path: <[EMAIL PROTECTED]>
Received: from doit.org
        ([199.184.188.17] helo=maui.doit.org ident=postfix)
        by spohr.debian.org with esmtp (Exim 4.50)
        id 1EftuN-0000Du-Iu
        for [EMAIL PROTECTED]; Fri, 25 Nov 2005 22:51:39 -0800
Received: from localhost.localdomain (c-24-20-136-228.hsd1.or.comcast.net 
[24.20.136.228])
        by maui.doit.org (Postfix) with ESMTP id 29571CD914
        for <[EMAIL PROTECTED]>; Fri, 25 Nov 2005 22:51:39 -0800 (PST)
Received: by localhost.localdomain (Postfix, from userid 1000)
        id 23C92E4713; Fri, 25 Nov 2005 22:50:43 -0800 (PST)
To: [EMAIL PROTECTED]
Subject: Re: Bug#327728: chkrootkit: False positive with reaim
From: lantz moore <[EMAIL PROTECTED]>
Date: Fri, 25 Nov 2005 22:50:43 -0800
In-Reply-To: <[EMAIL PROTECTED]> (Nathan Summers's message of "Sun,
 11 Sep 2005 14:24:51 -0400")
Message-ID: <[EMAIL PROTECTED]>
User-Agent: Gnus/5.090016 (Oort Gnus v0.16) XEmacs/21.4 (Jumbo Shrimp)
References: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_30,HAS_BUG_NUMBER,
        RCVD_IN_SORBS autolearn=no version=2.60-bugs.debian.org_2005_01_02

Nathan Summers <[EMAIL PROTECTED]> writes:

> With reaim version 0.8-3, chkrootkit reports that the bindshell rootkit
> is present with infected port 5190.  This port is used by the reaim AIM
> proxy.

this bug was "fixed" (reaim was added to the list of known
false-positives) with the 0.46-1 upload.

-l


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to