probably wu-ftpd, as adam mentioned.. there has been a rash of wu-ftpd related exploits, i saw an advisory a couple weeks ago on caldera Thank You, Ben Kochie (ben at nerp.net) *-----------------------* [ - * - * - * - * - * - * - * - ] | Unix/Linux Consulting | [ Haiku Error Message: ] | PC/Mac Repair | [ Chaos reigns within. ] | Networking | [ Reflect, repent, and reboot. ] | http://nerp.net | [ Order shall return. ] *-----------------------* [ - * - * - * - * - * - * - * - ] "Unix is user friendly, Its just picky about its friends." On Sun, 8 Oct 2000, Brian wrote: > My system was hacked last night, I was shut down from 10 pm until about > 9 this morning, when I rebooted I had a new account called pbadmin on my > login screen, before I just blow this acount away I would like to find > out how he got into my system. Any suggestions on how to back track > him? > I'm running caldera 2.4edesktop, with a dsl connection through a cisco > 675 and a netgear RT311 router. > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: tclug-list-unsubscribe at mn-linux.org > For additional commands, e-mail: tclug-list-help at mn-linux.org > --------------------------------------------------------------------- To unsubscribe, e-mail: tclug-list-unsubscribe at mn-linux.org For additional commands, e-mail: tclug-list-help at mn-linux.org