Security Incidents mailing list archives

Re: Compromised FBSD/Apache

From: Charles Blackburn <charlesb () summerfield-technology co uk>
Date: 25 Nov 2002 18:20:07 +0000

I don't know about fstat, but i have fgrep and netstat :P

they are in the dirs as follows:

/usr/bin/fgrep
/bin/netstat

as for fstat i don't know
maybe that's an external program?

btw I run slack. 8.1

regards
charles

On Fri, 2002-11-22 at 16:28, Thomas C. Meggs wrote:

Hi,

Out of curiosity what is the Linux and Solaris equivalents for doing 
this? I did a quick check under Linux and didn't see any similarly named 
programs, and the UNIX Rosetta Stone wasn't much help either. Thanks!

Attachment: signature.asc
Description: This is a digitally signed message part

Current thread:

Compromised FBSD/Apache Greg S. Wirth (Nov 17)
- Re: Compromised FBSD/Apache Benjamin Krueger (Nov 19)
- Re: Compromised FBSD/Apache Greg A. Woods (Nov 19)
  - Re: Compromised FBSD/Apache Jay D. Dyson (Nov 21)
  - Re: Compromised FBSD/Apache Micheal Patterson (Nov 22)
    - Re: Compromised FBSD/Apache Thomas C. Meggs (Nov 25)
    - Re: Compromised FBSD/Apache Jose Nazario (Nov 25)
    - Re: [CERT] Re: Compromised FBSD/Apache ePAc (Nov 25)
    - Re: Compromised FBSD/Apache Adam Sampson (Nov 25)
    - Re: Compromised FBSD/Apache Skip Carter (Nov 25)
    - Re: Compromised FBSD/Apache Charles Blackburn (Nov 25)
- <Possible follow-ups>
- Re: Compromised FBSD/Apache Hernan Otero (Nov 20)
  - Re: Compromised FBSD/Apache D.C. van Moolenbroek (Nov 21)
  - increased attacks on port 2599 Esler, Joel -- Sytex Contractor (Nov 22)
    - Re: increased attacks on port 2599 H C (Nov 25)
    - RE: increased attacks on port 2599 Esler, Joel -- Sytex Contractor (Nov 25)
    - RE: increased attacks on port 2599 H C (Nov 25)
    - Re: increased attacks on port 2599 gminick (Nov 25)
- RE: Compromised FBSD/Apache Boyan Krosnov (Nov 25)