Package: chkrootkit
Version: 0.57-2+b4
Severity: normal

I got the following warning:

-Checking `bindshell'...                                     not found
+Checking `bindshell'...                                     WARNING
+
+WARNING: Potential bindshell installed: infected ports: 60001
+

According to lsof, this is actually mosh-server (from the mosh Debian
package).

-- System Information:
Debian Release: 12.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 
'stable-debug'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-22-amd64 (SMP w/1 CPU thread; PREEMPT)
Kernel taint flags: TAINT_WARN
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages chkrootkit depends on:
ii  libc6  2.36-9+deb12u7

Versions of packages chkrootkit recommends:
ii  binutils                        2.40-2
ii  bsd-mailx [mailx]               8.1.2-0.20220412cvs-1
ii  cron [cron-daemon]              3.0pl1-162
ii  iproute2                        6.1.0-3
ii  mailutils [mailx]               1:3.15-4
ii  net-tools                       2.10-0.1
ii  postfix [mail-transport-agent]  3.7.11-0+deb12u1
ii  procps                          2:4.0.2-3
ii  systemd-sysv                    252.26-1~deb12u2

chkrootkit suggests no packages.

-- no debconf information

-- 
Vincent Lefèvre <vinc...@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Reply via email to