[CentOS] -bash: /bin/grep: cannot execute binary file

Bill Campbell centos at celestial.com
Sat Oct 18 16:12:23 UTC 2008


On Sat, Oct 18, 2008, Semih Gokalp wrote:
>
>   Hi all,I have problem on CentOS 5.2
>   while everything is working great,suddenly i have this error when i
>   login my server,

This could well mean that your system has been cracked.  These
programs are frequently changed in common root exploits.  You can
run ``rpm -V packagename'' to check for package corruption:

The command ``rpm -qf /bin/egrep'' will show the package name to
which /bin/egrep belongs.  A lazy way to handle this is:

rpm -V `rpm -qf /bin/egrep`
rpm -V `rpm -qf /bin/hostname`

The most common reason these programs don't run after a root
exploit is that the cracker has replaced them with binaries from
another distribution and the binaries are looking for shared
libraries that are not on the cracked system.

Bill
-- 
INTERNET:   bill at celestial.com  Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/  PO Box 820; 6641 E. Mercer Way
Voice:          (206) 236-1676  Mercer Island, WA 98040-0820
Fax:            (206) 232-9186

"I do not feel obliged to believe that the same God who has endowed us
with sense, reason, and intellect has intended us to forego their use."
    -- Galileo Galilei


More information about the CentOS mailing list