Security Incidents mailing list archives

Re: RedHat 6.2 boxes root'ed, shitc.tgz installed

From: josh <dorqus () FREEK COM>
Date: Fri, 20 Oct 2000 17:05:24 -0400

Andreas Östling wrote...

There is a modified sshd /bin/fgry which listens on port 5665
and /bin/in.slogind that listens on port 19000.


What did the output (if any) look like when connecting to these ports?


Looked like an ssh prompt (port 5665) and a telnet prompt (port 19000)

--
josh