Re: Verify programs

2003-08-25 Thread Alvin Oga
hi bas On Mon, 25 Aug 2003, Bas Benschop wrote: > Hello, > > This weekend several systems at our site were hacked. In /var/spool/.test/ > several programs were installed, log, pscan, x and xscan. do you mind saying which "versions" they broke into do you mind saying how you think they got in

Re: Verify programs

2003-08-25 Thread Harry Brueckner
Sorry, I forgot this link, which might also prove to be useful in the future. ;-) http://www.debian.org/doc/manuals/securing-debian-howto/index.en.html Harry --On Monday, August 25, 2003 11:34:35 AM +0200 Bas Benschop <[EMAIL PROTECTED]> wrote: This weekend several systems at our site were hac

Re: Verify programs

2003-08-25 Thread Harry Brueckner
Here are some links that might help you. http://www.fish.com/tct/help-when-broken-into http://www.dpo.uab.edu/~kalyan/incidentchecklist.html http://www.sans.org/rr/catindex.php?cat_id=27 HTH, Harry --On Monday, August 25, 2003 11:34:35 AM +0200 Bas Benschop <[EMAIL PROTECTED]> wrote: This weeken

Re: Verify programs

2003-08-25 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, Aug 25, 2003 at 11:34:35AM +0200, Bas Benschop wrote: > Hello, > > This weekend several systems at our site were hacked. In /var/spool/.test/ > several programs were installed, log, pscan, x and xscan. > > Also some system utilities were repl

Verify programs

2003-08-25 Thread Bas Benschop
Hello, This weekend several systems at our site were hacked. In /var/spool/.test/ several programs were installed, log, pscan, x and xscan. Also some system utilities were replaced with older versions. Is it possible to check the versions of programs and compare them with the versions in the pack