Re: [LUG] Compromised :-(

[Nick Kew <nick@xxxxxxxxxxxx>]

On Wed, 25 Dec 2002, Mark McRitchie wrote:

> The process was running under the apache user context and was executed as
> "./bind" I found the executable at /tmp/.install/bind

Ouch!

> Whats the best place to find more information on what this could be?

My first port of call would be a google search.  Followed (if not
successful) by a bugtraq search.

-- 
Nick Kew


--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe.