 | | | Security Problem? | Security Problem? 2003-07-22 - By cKBoy
Back
[root@]# netstat -l
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 *:mysql *:* LISTEN
tcp 0 0 *:ftp *:* LISTEN
tcp 0 0 *:telnet *:* LISTEN
udp 0 0 *:bootpc *:*
Active UNIX domain sockets (only servers)
Proto RefCnt Flags Type State I-Node Path
unix 2 [ ACC ] STREAM LISTENING 1091
/var/lib/mysql/mysql.sock
My netstat -l recently showed this.
tcp 0 0 *:telnet *:* LISTEN
udp 0 0 *:bootpc *:* <---- This is
new. Where did this come from?
Is that a backdoor? how can I tell which program is listening on it? or if
I'm really infected with a backdoor. I have also install and ran chkrootkit
with no problems although I didn't use external ls,cat... etc.
Earn $52 per hosting referral at Lunarpages.
|
|
|