Re: Exited on signal 11 ??

From: Anton Berezin (none@tobez--tobez.org.lh.bsd-dk.dk)
Date: Wed 30 May 2001 - 02:33:21 CEST


Date: Wed, 30 May 2001 02:33:21 +0200
From: Anton Berezin <none@tobez--tobez.org.lh.bsd-dk.dk>
To: bsd-dk@BSD-Dk.dk
Subject: Re: Exited on signal 11 ??

On Wed, May 30, 2001 at 12:15:59AM +0200, mads@kanon.net wrote:
> Hej liste..
>
> Hvad betyder disse kernel log messages:
> > pid 5573 (ftpd), uid 14: exited on signal 11
> > pid 5581 (ftpd), uid 14: exited on signal 11
>
> Jeg kan godt se at det betyder at to ftpd processer er blevet afbrudt,
> men er der nogen som ved hvad signal 11 betyder??

Signal 11 is SIGSEGV - segment violation. It is typically caused by
programs trying to write to memory regions that the program has no
permission to write to.

In this particular case, however, what you see is the strong indication
that someone was trying to hack into your system. There were couple of
security vulnerabilities in FreeBSD's (sorry for the assumption here)
ftpd. Please see the list of FreeBSD security advisories on
www.freebsd.org.

Oh, and by the way, it is possible that whoever has done that has
succeeded, so you'd better investigate.

Cheers,
=Anton.

-- 
May the tuna salad be with you.



This archive was generated by hypermail 2b30 : Wed 15 Nov 2006 - 18:24:08 CET