Tiger reports possible Slapper worm, but chkrootkit disagrees.
I have Tiger Audit set up on my Sarge system. My last two reports say this:
# Running chkrootkit (/usr/sbin/chkrootkit) to perform further checks...
OLD: --WARN-- [rootkit004f] Chkrootkit has detected a possible rootkit installation
OLD: Warning: Possible Slapper Worm installed
However, when I run chkrootkit itself, it says:
Checking `slapper'... not infected
So, is this a bug in Tiger? It isn't listed at bugs.debian.org.
--
Carl Fink carl@fink.to
Jabootu's Minister of Proofreading
http://www.jabootu.com
Reply to: