1.7 compromise attempt and crash?

[David L. Nicol]

Might be symlink troubles again, but this is what was in ~news/run:



> ls -l run
total 1
srwxrwxr-x   1 news     news           0 May 12 21:37 control
srwxrwxrwx   1 root     news           0 May 12 05:43 ctlinndaacmEa
srwxrwxrwx   1 news     news           0 May 12 03:15 ctlinndaawEva
-rw-rw-r--   1 news     news           5 May 12 21:38 innd.pid
srwxrwxr-x   1 news     news           0 May 12 21:37 nntpin
> date
Fri May 12 21:47:19 CDT 2000

> rm run/ctlinndaa*


I don't know why there would be a zero-length setuid root file 
in there.


Did 1.7 servers all over crash at dawn today or just mine?


-- 
                          David Nicol 816.235.1187 nicold at umkc.edu
                            You discover uranium! collect $240,000