[56420] in Hotline Meeting
quickstation-11-1 broken, and possibly compromised
daemon@ATHENA.MIT.EDU (Mitchell E Berger)
Thu Sep 13 21:01:06 2001
Message-Id: <200109140101.VAA31927@quickstation-11-2.mit.edu>
To: hotline@MIT.EDU
cc: mitchb@MIT.EDU
Date: Thu, 13 Sep 2001 21:01:04 -0400
From: Mitchell E Berger <mitchb@MIT.EDU>
Hi,
I've found quickstation-11-1 running Athena 8.4, thinking its name is
localhost, not responding to pings on its proper IP address, and complaining
that it thinks it's a layered machine. After a zephyr discussion on class
consult, I've turned it off and left a note on the keyboard stating that
nobody should use it because it may be compromised (it looks as if someone
reinstalled it themselves; who knows what else they did).
Mitch