Package: mldonkey-server Version: 2.8.1-2etch1 Severity: normal Hi,
it seems that Mldonkey does not report the use of port 4000 (telnet) correctly, because chkrootkit reports it as "INFECTED", which should not happen for a program in Debian, no? Here is the report given by chkrootkit: ---------- >From [EMAIL PROTECTED] Mon Apr 23 07:08:56 2007 Envelope-to: [EMAIL PROTECTED] Delivery-date: Mon, 23 Apr 2007 07:08:56 +0200 From: [EMAIL PROTECTED] (Cron Daemon) To: [EMAIL PROTECTED] Subject: Cron <[EMAIL PROTECTED]> test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily ) Content-Type: text/plain; charset=ANSI_X3.4-1968 X-Cron-Env: <SHELL=/bin/sh> X-Cron-Env: <PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin> X-Cron-Env: <HOME=/root> X-Cron-Env: <LOGNAME=root> Date: Mon, 23 Apr 2007 07:08:56 +0200 /etc/cron.daily/chkrootkit: The following suspicious files and directories were found: (...) INFECTED (PORTS: 4000) -------- And this is result of nmap -------- $ nmap localhost Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2007-04-23 17:21 CEST Interesting ports on Papageno (127.0.0.1): Not shown: 1669 closed ports PORT STATE SERVICE 22/tcp open ssh 25/tcp open smtp 53/tcp open domain 80/tcp open http 111/tcp open rpcbind 113/tcp open auth 443/tcp open https 4000/tcp open remoteanything 6881/tcp open bittorent-tracker 9999/tcp open abyss 31416/tcp open boinc-client Nmap finished: 1 IP address (1 host up) scanned in 0.225 seconds ---------- I will be happy to provide any help and logs needed. Regards, Didier -- System Information: Debian Release: 4.0 APT prefers testing APT policy: (500, 'testing'), (500, 'stable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-4-k7 Locale: LANG=fr_CH.UTF-8, LC_CTYPE=fr_CH.UTF-8 (charmap=UTF-8) Versions of packages mldonkey-server depends on: ii adduser 3.102 Add and remove users and groups ii debconf [debconf-2.0] 1.5.11 Debian configuration management sy ii dpkg 1.13.25 package maintenance system for Deb ii libbz2-1.0 1.0.3-6 high-quality block-sorting file co ii libc6 2.3.6.ds1-13 GNU C Library: Shared libraries ii libgcc1 1:4.1.1-21 GCC support library ii libgd2-noxpm 2.0.33-5.2 GD Graphics Library version 2 (wit ii libpng12-0 1.2.15~beta5-1 PNG library - runtime ii libstdc++6 4.1.1-21 The GNU Standard C++ Library v3 ii mime-support 3.39-1 MIME files 'mime.types' & 'mailcap ii ucf 2.0020 Update Configuration File: preserv ii zlib1g 1:1.2.3-13 compression library - runtime mldonkey-server recommends no packages. -- debconf information: * mldonkey-server/max_hard_download_rate: 0 * mldonkey-server/launch_at_startup: true mldonkey-server/max_alive: 48 mldonkey-server/run_as_user: mldonkey mldonkey-server/reown_file: false mldonkey-server/mldonkey_group: mldonkey mldonkey-server/mldonkey_niceness: 0 mldonkey-server/false_password: mldonkey-server/fasttrack_problem: * mldonkey-server/mldonkey_dir: /var/lib/mldonkey mldonkey-server/mldonkey_move: false * mldonkey-server/max_hard_upload_rate: 0 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
