RE: SSH compiled with backdoor
"Chain, David (NA ITRC Team Lead)" <[email protected]>
| Newsgroups | gmane.comp.security.incidents |
|---|---|
| Message-ID | <FF5557F23251F341A14750EBFBBD63D60299BF87@cacexc09.americas.cpqcorp.net> |
VI is much better than PICO.. But chances are, if he is looking to do something harmful, it will be embedded deeper then in the java libraries. David. -----Original Message----- From: [email protected] [mailto:[email protected]] Sent: Friday, September 02, 2005 1:05 AM To: [email protected] Subject: Re: SSH compiled with backdoor it's quite interesting. Although i can't find any reason for these commands. mkdir /lib/java cp /usr/sbin/sshd a mv a /lib/java It might be that he wants to come back and do something with it. Anyone? (btw, why not delete pico from your system and intall vi(m)... he might get pissed and leave. ) cheers.