Did you update samba last night?

----- Original Message -----
From: "Jake Colman" <[EMAIL PROTECTED]>
To: "RedHat List" <[EMAIL PROTECTED]>
Sent: Tuesday, January 08, 2002 1:32 PM
Subject: Have I Been Hacked?


>
> Last night's tripwire report shows me the following:
>
> Modified object name:  /usr/sbin/nmbd
>
>   Property:            Expected                    Observed
>   -------------        -----------                 -----------
> * CRC32                Bxg0hX                      AZ+PIg
> * MD5                  C7FzKDjQBMyVi/wKwNKkmI      DvNlgaBlMV2gQRCQNROrxg
>
> What could cause this other than someone hacking it and changing the
binary?
> I am running an iptables-based firewall so I would be surprised if
something
> like this has happened.
>
> Any suggestions?
>
> --
> Jake Colman
>
> Principia Partners LLC                  Phone: (201) 946-0300
> Harborside Financial Center               Fax: (201) 946-0320
> 902 Plaza Two                          E-mail: [EMAIL PROTECTED]
> Jersey City, NJ 07311                  www.principiapartners.com
>
>
>
> _______________________________________________
> Redhat-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/redhat-list
>



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to