Re: I think I have been hacked

Article View: comp.os.linux.security

Article #17

Back to comp.os.linux.security Previous Next

#17

From: RainbowHat
Date: Mon, 27 May 2002 17:08

24 lines
2166 bytes

]connection for my home network of several Win9x PC's and one RH72

>>>May 26 20:49:41 torvalds network: Bringing up route unknown
>>>succeeded
>>>May 26 20:49:41 torvalds network: Bringing up route eth0 succeeded

>Please try the following commands. 

/sbin/route
/sbin/ifconfig
cat /proc/net/route
cat /proc/net/rt_cache

And I'm not sure this is related or not... 

            L0pht Security Advisory		
Vulnerable: Microsoft Windows95a (w/winsock2), Windows95b
            Windows98, Windows98se and Sun Microsystems...
  Severity: Attackers can remotely add default route entries
            on the victims host.

-- 
Regards, RainbowHat. To spoof or not to spoof, that is the IPv4 packet.
----+----1----+----2----+----3----+----4----+----5----+----6----+----7

Technical Details

Message-ID: <TGZXMJ5TV3AW1113Y1OCESTMnHiATlE@blackhole.mit.edu>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!pln-e!extra.newsguy.com!lotsanews.com!newsfeed.mesh.ad.jp!t-newsgw1.odn.ne.jp!nwall.odn.ne.jp!blackhole.mit.edu!whitehole!not-for-mail

References:

<3CF166C0.6C6DB09C@wt.com.au> <slrnaf33hc.c0g.zebee@zipperii.zip.com.au> <UG6XMJ4H7XHW1115JXAH77O1nHiATlE@blackhole.mit.edu>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 102983,12f974d98d69a93f
X-Google-Attributes: gid102983,public
X-Google-Thread: 106e9e,12f974d98d69a93f
X-Google-Attributes: gid106e9e,public
X-Google-ArrivalTime: 2002-05-27 10:10:13 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!pln-e!extra.newsguy.com!lotsanews.com!newsfeed.mesh.ad.jp!t-newsgw1.odn.ne.jp!nwall.odn.ne.jp!blackhole.mit.edu!whitehole!not-for-mail
From: RainbowHat <nHiATlE@blSackholeP.mAit.edMu.invalid>
Newsgroups: comp.os.linux.security,aus.computers.linux
Subject: Re: I think I have been hacked
Date: Mon, 27 May 2002 17:08:46 +0000 (UTC)
Organization: Paradise
Lines: 25
Distribution: World
Message-ID: <TGZXMJ5TV3AW1113Y1OCESTMnHiATlE@blackhole.mit.edu>
References: <3CF166C0.6C6DB09C@wt.com.au> <slrnaf33hc.c0g.zebee@zipperii.zip.com.au> <UG6XMJ4H7XHW1115JXAH77O1nHiATlE@blackhole.mit.edu>
NNTP-Posting-Host: cbcnni-03s1p205.ppp12.odn.ad.jp
X-Trace: nwall2.odn.ne.jp 1022519326 29349 61.209.66.205 (27 May 2002 17:08:46 GMT)
X-Complaints-To: news@odn.ad.jp
NNTP-Posting-Date: Mon, 27 May 2002 17:08:46 +0000 (UTC)
X-Newsreader: Micro$hit 0UTL00K 3XPR355 (Multics PDP-10)
X-BigBrother: Hackers Coderpunks Debugging Tools Stego Polymorphic Worm r00t Real Virtual Intelligence PGP
Cancel-Lock: SHA1:F5KvXpoHnBILGFejiXnaOcxZLqV=

Reply to Parent Message