[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: user uid problems
- To: misc_(_at_)_openbsd_(_dot_)_org
- Subject: Re: user uid problems
- From: Ben Goren <ben_(_at_)_trumpetpower_(_dot_)_com>
- Date: Mon, 16 Dec 2002 07:52:09 -0700
On Mon, Dec 16, 2002 at 07:15:17AM -0500, Frank Bax wrote:
> I'm am experiencing an intermittant problem on my 2.9 box.
Stop right there. First, 2.9, being more than a couple releases
old, is no longer officially supported. Nobody's seriously looked
at that code in some time. There have been various bugs discovered
in newer versions of OpenBSD, including one remote root hole. If
you haven't back-ported the various appropriate security patches
(and verified their validity on the old software) then you're
vulnerable to attack.
> A user account that is not used very often has the following
> problem - sometimes when I log into this account, various wierd
> problems occur with numerous commands and when I do 'whois', I
> get 1010 instead of the username. If I then logon as root and
> run vipw and force a save of file (without making any changes),
> the problem goes away. Some days/weeks later it will present
> itself again (with no reboot in between). Any ideas what to do
> about this?
This *could* be easily attributed to an unwelcome visitor on your
computer. Then again, it could also be something honest. I'm
definitely getting ``You've been hax0r3d'' vibes here, though.
I'm not one to suggest a format and re-install of non-Windows
computers just to fix a (seemingly) minor problem. I'll make an
exception in your case, though. You *really* need to be running
something modern, prefereably 3.2, so there's the install. I
wouldn't trust anything on a (presumably unpatched) 2.9 computer,
so there's the format.
Good luck,
b&
--
Ben Goren
mailto:ben_(_at_)_trumpetpower_(_dot_)_com
http://www.trumpetpower.com/
icbm:33o25'37"N_111o57'32"W
[demime 0.98d removed an attachment of type application/pgp-signature]
Visit your host, monkey.org