dwen,
i think it's the cheese worm.
check out http://www.cert.org/incident_notes/IN-2001-05.html
On Tue, 22 May 2001, dwen wrote:
>
>
> > > im using default kernel of RH 6.2 and services such as DNS/mail radius
> > > server. I have a lot of local users for dial-up and shell access. I guess
> > ~~~~~~~~~~~~~~~~~~~~
> >
> > There you go... That's probably why you got hacked..
>
> the shell access being used is for change password only...they dont even
> have individual home dir. Im using SSH for local shell access.
>
>
>
> thanks,
> dwen
>
> _
> Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
> To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
>
> To subscribe to the Linux Newbies' List: send "subscribe" in the body to
>[EMAIL PROTECTED]
>
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]