[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Checking `bindshell'... INFECTED (PORTS: 3049)



Hello *,

On Thu, Sep 29, 2005 at 11:12:27AM +0100, Jon Dowland wrote:
> On Thu, Sep 29, 2005 at 09:21:49AM +0400, deb@nerdshack.com wrote:
> > Bug in the chkrootkit or in the cfs ?
> > Killing cfsd makes report clear,but i suppose it is not a solution .
> 
> chkrootkit, but I'm not sure a false positive qualifies as a bug.

</usr/share/doc/chkrootkit/README.FALSE-POSITIVES> reads:
| below is a (non-exhaustive) list of packages that are known to cause false
| positives.  before filing a bug report, please check this list.
| 
| listens on well known ports
|   [...]
|   cfs: bindshell listens on port 3049.

A similar warning is in README.Debian in Sarge's version...

Cheers,
Flo

Attachment: signature.asc
Description: Digital signature


Reply to: