Complete.Org: Mailing Lists: Archives: linux-help: May 2001:
[linux-help] Re: linux passwd file
Home

[linux-help] Re: linux passwd file

[Top] [All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index] [Thread Index]
To: <linux-help@xxxxxxxxx>
Subject: [linux-help] Re: linux passwd file
From: "Dale W Hodge" <dwh@xxxxxxxxxxxxxxxx>
Date: Sun, 20 May 2001 16:42:31 -0500
Reply-to: linux-help@xxxxxxxxx

> -----Original Message-----
> From: linux-help-bounce@xxxxxxxxx [mailto:linux-help-bounce@xxxxxxxxx]On
> Behalf Of j m wagle
>
> Could someone help me with the following 5 entries in my passwd file:
>
> nashu:VC5POxYUtMvIo:505:505::/home/nashu:/bin/bash
>
> cap:bDHttamElaAsQ:506:506::/home/cap:/bin/bash
>
> supa:.FABZfwxGuyjQ:507:507::/home/supa:/bin/bash
>
> sd:SFs4TXvjpxNBU:0:0:Shutdown Server:/home/sd:/bin/bash
>
> cgi:XfsNgjodvDX0g:0:0::/home/cgi:/bin/bash
>
>
>
> I do not know how these entries got here.  I did have a strange thing
> happen with my 'root' password (it seems to me it changed -- I did not
> 'forget' the password).
>
Your system may have been hacked. Two people on this list have already had it
happen. Missing root passwords and strange or missing entries in the password
file are often signs of being hacked. You might want to follow these two
threads:
http://www.complete.org/mailinglists/archives/discussion-200105/msg00027.html
http://www.complete.org/mailinglists/archives/linux-help-200105/msg00005.html

--dwh

---
Dale W Hodge - dwh@xxxxxxxxxxxxxxxx
Secretary & Website Maintainer - info@xxxxxxxxx
Air Capital Linux User's Group  (ACLUG)
---


-- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi


[Prev in Thread] Current Thread [Next in Thread]