Winter Quarter 2002
Email: [email protected]
The following is part of the output from ls -sailF /bin /usr/sbin . What is suspicious about it?
< CLASS="Code"> 64236 168 -r-xr-xr-x 1 root 160028 May 2 20:53 /bin/csh* < CLASS="Code"> 64293 192 -r-xr-xr-x 2 root 180816 May 2 20:58 /bin/ksh* < CLASS="Code"> 64285 88 -r-xr-xr-x 3 root 89564 May 2 21:02 /bin/sh* < CLASS="Code"> . . . < CLASS="Code"> 309872 144 -r-xr-xr-x 1 root 137984 Aug 19 14:58 /usr/sbin/in.named* < CLASS="Code"> 309704 9 -r-xr-xr-x 1 root 8532 May 2 20:56 /usr/sbin/in.rexecd* < CLASS="Code"> 309705 10 -r-xr-xr-x 1 root 9672 May 2 20:56 /usr/sbin/in.rlogind* < CLASS="Code"> 309707 10 -r-xr-xr-x 1 root 9836 May 2 20:56 /usr/sbin/in.rshd* < CLASS="Code"> 309710 88 -r-sr-xr-x 3 root 89564 Aug 22 03:05 /usr/sbin/in.telnetd*
|
ECS 153, Introduction to Computer Security Winter Quarter 2002 Email: [email protected] |