Dimitri Maziuk wrote:
* Dimitri Maziuk ([EMAIL PROTECTED]) spake thusly:
What's in /etc/services for port 1037?
D'oh! Make that /etc/inetd.conf.
Dima
No port numbers at all mentioned in /etc/inetd.conf (I think you were
right the first time). The only reference to telnet in inetd.conf
Just do a simple check:
telnet
and you should get:
telnet: Unable to connect to remote host: Connection refused
Matt
On Mon, 2002-01-14 at 16:08, Kent West wrote:
> Dimitri Maziuk wrote:
>
> > What's in /etc/services for port 1037? Who else has r00t on the
> > box and are you sure they didn't do
Dimitri Maziuk wrote:
What's in /etc/services for port 1037? Who else has r00t on the
box and are you sure they didn't do that?
No reference whatsoever to 1037 in /etc/services. Just another clue that
it is indeed a cracked box.
Kent
* Dimitri Maziuk ([EMAIL PROTECTED]) spake thusly:
> What's in /etc/services for port 1037?
D'oh! Make that /etc/inetd.conf.
Dima
--
Well, lusers are technically human.-- Red Drag Diva
On Mon, Jan 14, 2002 at 02:49:36PM -0600, Kent West wrote:
> I've got a Debian box (2.2.17, mostly woody) that I've just discovered
> has a more-or-less hidden telnetd running on port 1037 as well as the
> normal telnetd on port 23. I thought I had uninstalled telnetd (although
> it's possible I
* Kent West ([EMAIL PROTECTED]) spake thusly:
> Noah Meyerhans wrote:
...
> >Having telnetd listening on port 1037, if in fact it is, is probably not
> >a good thing. Have you actually tried telnetting to that port ('telnet
> >localhost 1037')?
>
> Yes, and I'm able to login via that port.
>
> >
Noah Meyerhans wrote:
On Mon, Jan 14, 2002 at 02:49:36PM -0600, Kent West wrote:
I've got a Debian box (2.2.17, mostly woody) that I've just discovered
has a more-or-less hidden telnetd running on port 1037 as well as the
normal telnetd on port 23. I thought I had uninstalled telnetd (althoug
On Mon, Jan 14, 2002 at 02:49:36PM -0600, Kent West wrote:
> I've got a Debian box (2.2.17, mostly woody) that I've just discovered
> has a more-or-less hidden telnetd running on port 1037 as well as the
> normal telnetd on port 23. I thought I had uninstalled telnetd (although
> it's possible I
> Date: Mon, 14 Jan 2002 14:49:36 -0600
> From: Kent West <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> To: debian-user@lists.debian.org
> Subject: Break-in? /usr/lib/telnetd, port 1037
> Resent-Date: Mon, 14 Jan 2002 15:53:52 -0500 (EST)
> Resent-From: d
I've got a Debian box (2.2.17, mostly woody) that I've just discovered
has a more-or-less hidden telnetd running on port 1037 as well as the
normal telnetd on port 23. I thought I had uninstalled telnetd (although
it's possible I forgot to remove it).
I'm thinking that somehow I've been broken
10 matches
Mail list logo
