On Sat, Oct 18, 2008, Semih Gokalp wrote:
Hi all,I have problem on CentOS 5.2 while everything is working great,suddenly i have this error when i login my server,
This could well mean that your system has been cracked. These programs are frequently changed in common root exploits. You can run ``rpm -V packagename'' to check for package corruption:
The command ``rpm -qf /bin/egrep'' will show the package name to which /bin/egrep belongs. A lazy way to handle this is:
rpm -V `rpm -qf /bin/egrep` rpm -V `rpm -qf /bin/hostname`
The most common reason these programs don't run after a root exploit is that the cracker has replaced them with binaries from another distribution and the binaries are looking for shared libraries that are not on the cracked system.
Bill