On Tue, 8 Aug 2000, Gary Carr spewed into the bitstream:
GC>One of our servers may have gotten hacked thru the ftp bug causing all
GC>logins to get denied. I can not log into the server as root or any other
GC>login unless I boot to single user mode. I have checked for the nologin file
GC>in the /etc directory and it is not present. What else do I need to check to
GC>find the cause of not being able to log into the console as root or any
GC>other user? BTW, I have also booted to single user mode and changed the root
GC>password and even run the passconv program to make sure the shadow file gets
GC>updated. I'm at a loss here and any help would be appreciated.
Reinstall. Sorry but you're in an ugly situation... imagine that /bin/login has
been replaced!
Alternatively you could scan the box and look for the hidden port because there
will be one...
--
Chuck Mead, CTO, LinuxMall.com
[EMAIL PROTECTED]
GnuPG Public Key Available: http://pgp.ai.mit.edu/
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list