[56556] in Hotline Meeting
Re: quickstation-3 likely compromised (Case 234276)
daemon@ATHENA.MIT.EDU (Jonathon Weiss)
Mon Sep 24 00:32:52 2001
Date: Mon, 24 Sep 2001 00:32:36 -0400 (EDT)
Message-Id: <200109240432.AAA00723@bearing-an-hourglass.mit.edu>
To: Mitchell E Berger <mitchb@MIT.EDU>
CC: hotline@MIT.EDU, mitchb@MIT.EDU
In-reply-to: "[56530] in Hotline Meeting"
From: Jonathon Weiss <jweiss@MIT.EDU>
This is symptomatic of the machine losing its passwd or shadow files.
This seems to happen periodically, and it should get fixed by a
reboot, but that might have failed (say if the network was down).
Rebooting the machine may fix the problem. It seems less likely to me
that it was a compromise.
--
Jonathon
