SUMMARY: Filenames with numeric extensions do not list

Thank you to all who replied.
=20
Jonathan Katz <jon@jonworld.com>
blymn@baesystems.com.au (Brett Lymn)
Dan Riley <dsr@mail.lns.cornell.edu>

My fears were quickly releasied.
Our systems had been compromised.=20
The acces was done through CERT=AE Advisory CA-2001-05 Exploitation of
snmpXdmid
The extent was deeper though. Many addional comamnd to tghose mentioned
in CERT had been effected.

The quick fiox hear was to stamp a new copy of the ls command into
/usr/bin/ls

What is intersretsing is that some suggestions involved using "strings
/usr/bin/ls"
The output there was macthed with that of a good ls command.=20
So either this was a variant trojan or the aithor(s) are getting
smarter.
{Probably read this list]

Anyway thanks again to all.
Time to rebuild the servers. Arghhhh
Greg K


-------- Original Message --------
From: Gregory Kaloutsis <gregk@qld.gov.au>
Subject: Filenames with numeric extensions do not list
To: sunmanagers@sunmanagers.org

SunOS athene 5.8 Generic sun4u sparc SUNW,Ultra-5_10

Strange situation.

If I create a file that has a numeric extension, the file will not
appear in a directory list.
But the file can be moved or copied via the cp and mv commands.

This is has caused me grief because I have been rotating log files with
numeric extensions for some time now. Today I awake only to find I can
not list them.

Is the problem with the ls command or does it lie with cp, mv
commands???

Greg K

eg.
touch tttt
# ls -la
total 0
drwxr-xr-x   2 root     other        512 Apr 23 09:20 .
drwxr-xr-x  32 root     sys          512 Apr 23 09:20 ..
-rw-r--r--   1 root     other          0 Apr 23 09:20 tttt
# cp tttt tttt.20010223
# ls -la
total 0
drwxr-xr-x   2 root     other        512 Apr 23 09:21 .
drwxr-xr-x  32 root     sys          512 Apr 23 09:20 ..
-rw-r--r--   1 root     other          0 Apr 23 09:20 tttt
# cp tttt.20010223 hhhh
# ls -la
total 0
drwxr-xr-x   2 root     other        512 Apr 23 09:21 .
drwxr-xr-x  32 root     sys          512 Apr 23 09:20 ..
-rw-r--r--   1 root     other          0 Apr 23 09:21 hhhh
-rw-r--r--   1 root     other          0 Apr 23 09:20 tttt
# rm tttt.20010223
#
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers