Re: brute force ssh attack

• To: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>
• Subject: Re: brute force ssh attack
• From: Jan Schaefer <jan_schaefer@xxxxxxxxxx>
• Date: Wed, 27 Apr 2005 14:18:48 +0200
• In-reply-to: <[email protected]>
• List-archive: <https://www.redhat.com/archives/fedora-list>
• List-help: <mailto:[email protected]?subject=help>
• List-id: For users of Fedora Core releases <fedora-list.redhat.com>
• List-post: <mailto:[email protected]>
• List-subscribe: <http://www.redhat.com/mailman/listinfo/fedora-list>, <mailto:[email protected]?subject=subscribe>
• List-unsubscribe: <http://www.redhat.com/mailman/listinfo/fedora-list>, <mailto:[email protected]?subject=unsubscribe>
• References: <[email protected]> <[email protected]> <[email protected]>
• Reply-to: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>

> meaning that they did gain root access after all but were able to hide
> this through a rootkit???

I'm really not an expert on this. But from my understanding, I would say
yes. I recommended a re-install of the complete box, because the
original poster can't be sure, that he has cleaned everthing that was
changed...

Greetings,

Jan

-- 
PGP: 2814 0DC4 597A 1083 9AA4 6F76 0DD9 54E1 B706 0963

• References:
  • brute force ssh attack
    • From: Daniel Kirsten
  • Re: brute force ssh attack
    • From: Jan Schaefer
  • Re: brute force ssh attack
    • From: Håkan Persson

• Prev by Date: Re: brute force ssh attack
• Next by Date: System Admin Responsibilities
• Previous by thread: Re: brute force ssh attack
• Next by thread: Re: brute force ssh attack
• Index(es):
  • Date
  • Thread