>>>>> "CB" == Chris Bond <[EMAIL PROTECTED]> writes:
CB> Did you update samba last night?
Not that I know of... Unless something updated it for me!
I am not (yet) running any scripts to auto-update my packages.
CB> ----- Original Message -----
CB> From: "Jake Colman" <[EMAIL PROTECTED]> To: "RedHat List"
CB> <[EMAIL PROTECTED]> Sent: Tuesday, January 08, 2002 1:32 PM
CB> Subject: Have I Been Hacked?
>>
>> Last night's tripwire report shows me the following:
>>
>> Modified object name: /usr/sbin/nmbd
>>
>> Property: Expected Observed
>> ------------- ----------- -----------
>> * CRC32 Bxg0hX AZ+PIg
>> * MD5 C7FzKDjQBMyVi/wKwNKkmI DvNlgaBlMV2gQRCQNROrxg
>>
>> What could cause this other than someone hacking it and changing the
CB> binary?
>> I am running an iptables-based firewall so I would be surprised if
CB> something
>> like this has happened.
>>
>> Any suggestions?
>>
>> -- Jake Colman
>>
>> Principia Partners LLC Phone: (201) 946-0300 Harborside Financial
>> Center Fax: (201) 946-0320 902 Plaza Two E-mail: [EMAIL PROTECTED]
>> Jersey City, NJ 07311 www.principiapartners.com
>>
>>
>>
>> _______________________________________________ Redhat-list mailing
>> list [EMAIL PROTECTED]
>> https://listman.redhat.com/mailman/listinfo/redhat-list
>>
CB> _______________________________________________ Redhat-list mailing
CB> list [EMAIL PROTECTED]
CB> https://listman.redhat.com/mailman/listinfo/redhat-list
--
Jake Colman
Principia Partners LLC Phone: (201) 946-0300
Harborside Financial Center Fax: (201) 946-0320
902 Plaza Two E-mail: [EMAIL PROTECTED]
Jersey City, NJ 07311 www.principiapartners.com
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
