RE: Visited by a cracker
| Newsgroups | gmane.comp.security.linux |
|---|---|
| Message-ID | <OFEF14BBC5.D5837BDB-ON80256ED2.002640AA-80256ED2.0027CB9E@uk.neceur.com> |
> I'm a little confused. There have been several suggestions to wipe the > box and I'm not disagreeing, but there was no sign of any successful > hack. I agree, mostly. The vulnerability that the cracker was trying to exploit was patched before the attempt took place and (from the logs provided) the exploit was unsuccessful. But I would like to see a safe checksum (tripwire/aide) of the file system to make a final decision.