[27091] in Hotline Meeting
RE:Venus
daemon@ATHENA.MIT.EDU (jjmorey@MIT.EDU)
Tue Feb 28 13:29:51 1995
From: jjmorey@MIT.EDU
To: hotline@MIT.EDU
Date: Tue, 28 Feb 1995 13:29:45 EST
------- Forwarded Message
Received: from PACIFIC-CARRIER-ANNEX.MIT.EDU by po8.MIT.EDU (5.61/4.7) id AA05778; Tue, 28 Feb 95 13:21:28 EST
Received: from MTGLAS.MIT.EDU by MIT.EDU with SMTP
id AA15619; Tue, 28 Feb 95 13:21:27 EST
Message-Id: <9502281821.AA15619@MIT.EDU>
Received: by mtglas.mit.edu
(1.38.193.4/16.2) id AA03187; Tue, 28 Feb 1995 13:20:06 -0500
From: Tom Herring <tah@mtglas.mit.edu>
Subject: Re: your mail
To: jjmorey@MIT.EDU
Date: Tue, 28 Feb 95 13:20:06 EST
Cc: tah@mtglas.mit.edu
In-Reply-To: <9502281806.AA01892@hector.MIT.EDU>; from "jjmorey@MIT.EDU" at Feb 28, 95 1:06 pm
Mailer: Elm [revision: 70.85]
>
> /***** hector:hotline / priam!jjmorey / 1:05 pm Feb 28, 1995*/
> >From tah@mtglas.mit.edu Tue Feb 28 12:51:31 1995
> From: Tom Herring <tah@mtglas.mit.edu>
> Subject: Root passwrd problem
> To: hotline@MIT.EDU
> Date: Tue, 28 Feb 95 12:50:15 EST
> Cc: tah@mtglas.mit.edu
> Mailer: Elm [revision: 70.85]
>
> I am the system manager for the Earth, Atmospheric and
> Planetary Sciences Department (EAPS) cluster in building
> 54 (Room 311). I was sent a message saying one of our
> macines (venus.mit.edu) had many processes running on it.
> When I tried to log in a root, I could not. I was able able
> to log in as root to other machines in our cluster; so I
> think that venus may have been hacked to the level that the
> hacker is now root. I have no idea how to regain control of
> the machine.
>
> Prof. Thomas Herring.
>
>
> Hi Prof-
>
> Please send an ok to hotline to reinstall software on Venus.
> What this means is anything you have customized would need
> to be redone and also anything you have stored on the hard
> disk would be gone. So as soon as you are ready for the
> reinstall let us know.
>
> Thanks
>
> JJ
> Athena Customer Service Rep
> /* ---------- */
>
Hi Jim,
I just back and checked venus and this time I could log in as
root so it looks like there really is not problem. The only
explanation I can think of is the shift key on the venus key
is in different place to that I am used to and I must have
consistently hit the wrong key (It was late in the day and
I was on my way home at the time so this could be the case).
I will monitor the machine for a couple of days and if I
see anything strange I will let you know. It looks like we
will not need to re-install.
Tom Herring.
------- End of Forwarded Message
