[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Checking `bindshell'... INFECTED (PORTS: 3049)



Thu, Sep 29, 2005 at 11:12:27AM +0100, Jon Dowland написал:
On Thu, Sep 29, 2005 at 09:21:49AM +0400, deb@nerdshack.com wrote:
(By the way , "# telnet localhost 3049" returns "conection refused")
Of course , i am ashamed  , but why this takes place ?

It may not be bound on the loopback interface. Try lsof -i:3049; maybe
it's only binding on your external interface.

Thanks,"lsof -i:3049" works fine.

|</usr/share/doc/chkrootkit/README.FALSE-POSITIVES> reads: | below is a (non-exhaustive) list of packages that are known to cause false | positives. before filing a bug report, please check this list. | | listens on well known ports | [...] | cfs: bindshell listens on port 3049. A similar warning is in README.Debian in Sarge's version... Cheers, Flo

Yes,thanks again and sorry for a silly question .


--
With best regards , Yura .



Reply to: