[CentOS] Exploit

Tue Nov 14 14:47:02 UTC 2006
Craig White <craigwhite at azapple.com>

You ***might*** want to try a heavy handed approach of downloading and
re-installing via --force method the ghostscript rpm but I would
definitely want to know how/why these packages changed from the original
installation because that would bother me.

You also might want to check the integrity of your system...

rpm -Va > /tmp/package_check.txt

and/or some kind of chkrootkit package for piece of mind.

Craig

On Tue, 2006-11-14 at 10:38 -0300, Departamento de Informatica wrote:
> the result of the comand rpm -V ghostscript
> 
> prelink: /usr/bin/gs: Could not find one of the dependencies
> prelink: /usr/bin/gs: at least one of file's dependencies has changed
> since prelinking
> S.?......   /usr/bin/gs
> missing     /usr/lib/libgs.so.7.07
> 
> should i remove ghostscript?? there's any method to repair the installation ?
> 
> 2006/11/14, Craig White <craigwhite at azapple.com>:
> > On Tue, 2006-11-14 at 09:00 -0300, Departamento de Informatica wrote:
> > > ////usr/lib/kde3/kfile_ps.so: Exploit.Linux.Gv FOUND
> > > ////usr/lib/kde3/gsthumbnail.so: Exploit.Linux.Gv FOUND
> > > ////usr/lib/libgs.so.7.07: Exploit.Linux.Gv FOUND
> > > ////usr/lib/libkghostviewlib.so.0.0.0: Exploit.Linux.Gv FOUND
> > >
> > > I start the procmail process and a mail with those lines appears on my
> > > inbox (with subject "Virus found"), i'm running  clamd too, but i dont
> > > know if this files could be infected by a virus
> > ----
> > try...
> >
> > rpm -V ghostscript
> >
> > and see if anything has changed from the original installation
> >
> > Craig
> >
> > _______________________________________________
> > CentOS mailing list
> > CentOS at centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> >
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos