Did you update samba last night? ----- Original Message ----- From: "Jake Colman" <[EMAIL PROTECTED]> To: "RedHat List" <[EMAIL PROTECTED]> Sent: Tuesday, January 08, 2002 1:32 PM Subject: Have I Been Hacked?
> > Last night's tripwire report shows me the following: > > Modified object name: /usr/sbin/nmbd > > Property: Expected Observed > ------------- ----------- ----------- > * CRC32 Bxg0hX AZ+PIg > * MD5 C7FzKDjQBMyVi/wKwNKkmI DvNlgaBlMV2gQRCQNROrxg > > What could cause this other than someone hacking it and changing the binary? > I am running an iptables-based firewall so I would be surprised if something > like this has happened. > > Any suggestions? > > -- > Jake Colman > > Principia Partners LLC Phone: (201) 946-0300 > Harborside Financial Center Fax: (201) 946-0320 > 902 Plaza Two E-mail: [EMAIL PROTECTED] > Jersey City, NJ 07311 www.principiapartners.com > > > > _______________________________________________ > Redhat-list mailing list > [EMAIL PROTECTED] > https://listman.redhat.com/mailman/listinfo/redhat-list > _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list