 | | | Red Hat Updates and SuckIT Rootkit Hits | Red Hat Updates and SuckIT Rootkit Hits 2005-10-06 - By Shaw, Marco
Back
FYI
> -- --Original Message-- --
> From: chk-manda@(protected)
> [mailto:chk-manda@(protected)] On Behalf Of Padgett, Randy
> Sent: Thursday, October 06, 2005 1:33 PM
> To: users@(protected)
> Subject: [crt-users] Red Hat Updates and SuckIT Rootkit Hits
>
>
> All:
>
> Two days ago I ran the latest updates from Red Hat on a ES Rel. 3
> server. After the updates were applied I got a hit on the SuckIT root
> kit. We investigated that server and it did not appear to be
> compromised. The next day we applied the updates to three more RH
> servers and those three also reported SuckIT infections. We then ran
> Rootkit Hunter on them and they all came back not infected
> with SuckIT.
> Has anyone else seen any hits on SuckIT after the current updates were
> applied? It appears there may be a bug in the SuckIT check after these
> Red Hat updates are applied. Thanks, Randy.
>
>
>
--
Taroon-list mailing list
Taroon-list@(protected)
https://www.redhat.com/mailman/listinfo/taroon-list
|
|
|