isnt there a security mailling list?
Gavin Budd wrote:
>
> I have had some break-ins on my RH6.0 system but I can't figure out where he
> is coming in at. One of the ways I can tell is I did a 'ps ax' and I saw an
> httpd process. This system doesn't have have a web server on it and I did a
>
On Mon, 20 Dec 1999, Gavin Budd wrote:
> This system doesn't have have a web server on it and I did a
> find / -name httpd and it didn't return anything. What is it that causes
> the name in ps to show different than the actual file that is running the
> process?
A process can use setproctitle(
Overwrite ARGV[0].
See the man page for nmap from www.insecure.org.
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
