[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: was I cracked? (rpc.statd, new version)



Alvin Oga <aoga@Mail.Linux-Consulting.com> writes:

> hi ya lukas
> 
> how did you check for modified binaries ???
> 
> if its an upto date deb box... its a failed attempt...
> if its a redhat box...time to go digging...
> 
> you have to check the filesize of the binaries... not just the date...
> compared to one that you know is NOT compromized...
> 	and if you really paranoid...run some tests on it..
> 

No, if you really are paranoid you just reinstall it.


Cheers, Stig
-- 
 23:58:03 up 11 days, 17:25,  3 users,  load average: 0.01, 0.03, 0.00



Reply to: