Re: Checking `bindshell'... INFECTED (PORTS: 3049)

From: Jon Dowland (lists_at_alcopop.org)
Date: 09/29/05

  • Next message: Radhika: "FTP server setup help required" 
    Date: Thu, 29 Sep 2005 11:12:27 +0100
To: debian-user@lists.debian.org

    On Thu, Sep 29, 2005 at 09:21:49AM +0400, deb@nerdshack.com wrote:
    > (By the way , "# telnet localhost 3049" returns "conection refused")
    > Of course , i am ashamed , but why this takes place ?

    It may not be bound on the loopback interface. Try lsof -i:3049; maybe
    it's only binding on your external interface.

    > Bug in the chkrootkit or in the cfs ?
    > Killing cfsd makes report clear,but i suppose it is not a solution .

    chkrootkit, but I'm not sure a false positive qualifies as a bug. 

    -- 
Jon Dowland
http://jon.dowland.name/
-- 
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  • Next message: Radhika: "FTP server setup help required"