Package: chkrootkit
Version: 0.44-2
Severity: normal
Tags: patch

The default install of bitlbee puts into inetd.conf:
6667   stream  tcp     nowait  bitlbee /usr/sbin/tcpd /usr/sbin/bitlbee

which matches the LPD worm regexp of "^666". I'm not sure if the "LPD
worm" also uses some of the 666* ports, but in case it does not, the
regexp should be changed to "^666\s" to avoid this false positive.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (800, 'unstable')
Architecture: i386 (x86_64)
Kernel: Linux 2.6.12-vs2.0-rc4
Locale: LANG=C, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)

Versions of packages chkrootkit depends on:
ii  binutils                    2.15-6       The GNU assembler, linker and bina
ii  debconf                     1.4.30.13    Debian configuration management sy
ii  libc6                       2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  net-tools                   1.60-10      The NET-3 networking toolkit

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to