Re[2]: Exited on signal 11 ??

From: mads (none@mads--petersen.eu.com.lh.bsd-dk.dk)
Date: Wed 30 May 2001 - 08:22:50 CEST


Date: Wed, 30 May 2001 08:22:50 +0200
From: mads <none@mads--petersen.eu.com.lh.bsd-dk.dk>
To: Anton Berezin <none@tobez--tobez.org.lh.bsd-dk.dk>
Subject: Re[2]: Exited on signal 11 ??

DAMN!!

 Thanks Anton.. That was what I feared.. Hmm.. Any small pointers to
 how I proceed from here?

 Mads

Wednesday, May 30, 2001, 2:33:21 AM, you wrote:

AB> On Wed, May 30, 2001 at 12:15:59AM +0200, mads@kanon.net wrote:
>> Hej liste..
>>
>> Hvad betyder disse kernel log messages:
>> > pid 5573 (ftpd), uid 14: exited on signal 11
>> > pid 5581 (ftpd), uid 14: exited on signal 11
>>
>> Jeg kan godt se at det betyder at to ftpd processer er blevet afbrudt,
>> men er der nogen som ved hvad signal 11 betyder??

AB> Signal 11 is SIGSEGV - segment violation. It is typically caused by
AB> programs trying to write to memory regions that the program has no
AB> permission to write to.

AB> In this particular case, however, what you see is the strong indication
AB> that someone was trying to hack into your system. There were couple of
AB> security vulnerabilities in FreeBSD's (sorry for the assumption here)
AB> ftpd. Please see the list of FreeBSD security advisories on
AB> www.freebsd.org.

AB> Oh, and by the way, it is possible that whoever has done that has
AB> succeeded, so you'd better investigate.

AB> Cheers,
AB> =Anton.



This archive was generated by hypermail 2b30 : Wed 15 Nov 2006 - 18:24:08 CET