From owner-freebsd-questions  Tue Aug  1 19:19:18 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from ns1.hutchtel.net (ns1.hutchtel.net [206.9.112.100])
	by hub.freebsd.org (Postfix) with ESMTP id F22F937BF50
	for <freebsd-questions@FreeBSD.ORG>; Tue,  1 Aug 2000 19:19:12 -0700 (PDT)
	(envelope-from jpaetzel@hutchtel.net)
Received: from mark8 (hutch-249.hutchtel.net [206.10.67.177])
	by ns1.hutchtel.net (8.9.1/8.9.0) with SMTP id VAA28337;
	Tue, 1 Aug 2000 21:18:54 -0500 (CDT)
Message-ID: <012301bffc28$bdd3a9c0$48440ace@mark8>
From: "Josh Paetzel" <jpaetzel@hutchtel.net>
To: "Glenn McCalley" <freebsd@mail.bnetmd.net>
Cc: <freebsd-questions@FreeBSD.ORG>
References: <Pine.BSF.4.21.0008012157170.18902-100000@mail.bnetmd.net>
Subject: Re: What the heck is -this- file?
Date: Tue, 1 Aug 2000 21:23:49 -0500
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


----- Original Message -----
From: "Glenn McCalley" <freebsd@mail.bnetmd.net>
To: "Josh Paetzel" <jpaetzel@hutchtel.net>
Cc: <freebsd-questions@FreeBSD.ORG>
Sent: Tuesday, August 01, 2000 8:59 PM
Subject: Re: What the heck is -this- file?


>
> Ahhh, but you don't understand...
> That's just the point - the "gobblygook" -is- the file name as shown by
>  "ls -l"
> Glenn.
>

In that case I would start to wonder about the integrity of my system from
either a hardware standpoint, or perhaps a malicious "user" standpoint.


> On Tue, 1 Aug 2000, Josh Paetzel wrote:
>
> >
> > ----- Original Message -----
> > From: "Glenn McCalley" <freebsd@mail.bnetmd.net>
> > To: <freebsd-questions@FreeBSD.ORG>
> > Sent: Tuesday, August 01, 2000 7:56 PM
> > Subject: What the heck is -this- file?
> >
> >
> > >
> > > What??!!
> > > Just poking around and found the following file entry in
/apache/htdocs:
> > >
> > > -rwsr-sr-t   1 root     wheel           0 Mar 28 15:33 J-�yq>�tn0�?
> > > �ӥ~o�Q�R>s�:N5Y;�jO���-Ou�8DW�<٢5ln}e8$��'Y�E"�cFk���
> > > ��fC�a�R s
> > >
> > > Kinda odd that it's suid, owned by root, with a sticky bit set?  -0-
> > > bytes in size?  Is that right?
> > >
> > > I was able to delete it, but other than sunspots, any thoughts on how
it
> > > got there?
> > >
> > > Thanks!
> > > Glenn.
> > >
> >
> > I don't know, but hopefully the same thing that made that file didn't
put
> > the gobblygook into you email as well. :)
> >
> > Josh




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message