RE: SSH compiled with backdoor

"Chain, David (NA ITRC Team Lead)" <[email protected]>
Newsgroups gmane.comp.security.incidents
Message-ID <FF5557F23251F341A14750EBFBBD63D60299BF87@cacexc09.americas.cpqcorp.net>
VI is much better than PICO.. But chances are, if he is looking to do
something harmful, it will be embedded deeper then in the java
libraries.


David. 

-----Original Message-----
From: [email protected] [mailto:[email protected]] 
Sent: Friday, September 02, 2005 1:05 AM
To: [email protected]
Subject: Re: SSH compiled with backdoor

it's quite interesting. Although i can't find any reason for these
commands. 

mkdir /lib/java
cp /usr/sbin/sshd a
mv a /lib/java

It might be that he wants to come back and do something with it. 
Anyone? 

(btw, why not delete pico from your system and intall vi(m)... he might
get pissed and leave. )

cheers.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.