On Sat, Oct 18, 2008, Semih Gokalp wrote:
>
> Hi all,I have problem on CentOS 5.2
> while everything is working great,suddenly i have this error when i
> login my server,
This could well mean that your system has been cracked. These
programs are frequently changed in common root exploits. You can
run ``rpm -V packagename'' to check for package corruption:
The command ``rpm -qf /bin/egrep'' will show the package name to
which /bin/egrep belongs. A lazy way to handle this is:
rpm -V `rpm -qf /bin/egrep`
rpm -V `rpm -qf /bin/hostname`
The most common reason these programs don't run after a root
exploit is that the cracker has replaced them with binaries from
another distribution and the binaries are looking for shared
libraries that are not on the cracked system.
Bill
--
INTERNET: bill@xxxxxxxxxxxxx Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way
Voice: (206) 236-1676 Mercer Island, WA 98040-0820
Fax: (206) 232-9186
"I do not feel obliged to believe that the same God who has endowed us
with sense, reason, and intellect has intended us to forego their use."
-- Galileo Galilei
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
