Re: Checking `bindshell'... INFECTED (PORTS: 3049)
On Thu, Sep 29, 2005 at 09:21:49AM +0400, deb@nerdshack.com wrote:
> (By the way , "# telnet localhost 3049" returns "conection refused")
> Of course , i am ashamed , but why this takes place ?
It may not be bound on the loopback interface. Try lsof -i:3049; maybe
it's only binding on your external interface.
> Bug in the chkrootkit or in the cfs ?
> Killing cfsd makes report clear,but i suppose it is not a solution .
chkrootkit, but I'm not sure a false positive qualifies as a bug.
--
Jon Dowland
http://jon.dowland.name/
Reply to: