Prv8 Shell
Server : Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4
System : Linux server.jackjohnson.com 2.6.32-279.5.2.el6.x86_64 #1 SMP Fri Aug 24 01:07:11 UTC 2012 x86_64
User : jackjohn ( 502)
PHP Version : 5.3.17
Disable Function : NONE
Directory :  /home/jackjohn/mail/.jackjohnson@jackjohnson_com/cur/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/jackjohn/mail/.jackjohnson@jackjohnson_com/cur/1349317088.001176.mbox:2,
Return-Path: <root@jackjohnson.nethosting.com>
Received: from jackjohnson.nethosting.com (localhost [127.0.0.1])
	by jackjohnson.nethosting.com (8.13.6.20060614/8.13.6) with ESMTP id l8R95ZIj063612
	for <root@jackjohnson.nethosting.com>; Thu, 27 Sep 2007 03:05:36 -0600 (MDT)
Received: (from root@localhost)
	by jackjohnson.nethosting.com (8.13.6.20060614/8.13.6/Submit) id l8R95Zea063578
	for root; Thu, 27 Sep 2007 03:05:35 -0600 (MDT)
Date: Thu, 27 Sep 2007 03:05:35 -0600 (MDT)
From: Charlie Root <root@jackjohnson.nethosting.com>
Message-Id: <200709270905.l8R95Zea063578@jackjohnson.nethosting.com>
To: root@jackjohnson.nethosting.com
Subject: jackjohnson.nethosting.com security run output


Checking setuid files and devices:
find: fts_read: No such file or directory

jackjohnson.nethosting.com setuid diffs:
--- /var/log/setuid.today	Thu Aug 16 03:03:31 2007
+++ /tmp/security.x29WJ9LU	Thu Sep 27 03:05:34 2007
@@ -3,9 +3,9 @@
 124664406 -rwxr-sr-x  1 root  mail        7668 Jul  2 09:23:09 2007 /backup/usr/local/bin/muttng_dotlock
 124664700 -rwsr-sr-x  1 root  mail       74140 Nov 17 18:17:16 2005 /backup/usr/local/bin/procmail
 124664757 -rws--x--x  1 root  wheel     949226 Nov 14 15:32:22 2005 /backup/usr/local/bin/sperl5.8.7
-124664690 ---s--x--x  2 root  wheel     103960 Jul 23 08:58:06 2007 /backup/usr/local/bin/sudo
-124664690 ---s--x--x  2 root  wheel     103960 Jul 23 08:58:06 2007 /backup/usr/local/bin/sudoedit
-124664996 -rws--x--x  1 root  wheel     270468 Jul 23 15:25:40 2007 /backup/usr/local/bin/xterm
+124664953 ---s--x--x  2 root  wheel     103928 Aug 20 09:36:53 2007 /backup/usr/local/bin/sudo
+124664953 ---s--x--x  2 root  wheel     103928 Aug 20 09:36:53 2007 /backup/usr/local/bin/sudoedit
+124664951 -rws--x--x  1 root  wheel     270468 Jul 30 15:41:35 2007 /backup/usr/local/bin/xterm
 124242811 -r-sr-xr-x  1 root  wheel      18332 Nov  3 01:10:07 2005 /bin/rcp
 124373523 -r-sr-xr-x  1 root  wheel      22528 Nov 18 08:57:07 2005 /sbin/ping
 124373524 -r-sr-xr-x  1 root  wheel      30696 Sep 20 14:15:21 2006 /sbin/ping6
@@ -52,21 +52,20 @@
 124664406 -rwxr-sr-x  1 root  mail     7668 Jul  2 09:23:09 2007 /skel/usr/local/bin/muttng_dotlock
 124664700 -rwsr-sr-x  1 root  mail     74140 Nov 17 18:17:16 2005 /skel/usr/local/bin/procmail
 124664757 -rws--x--x  1 root  wheel   949226 Nov 14 15:32:22 2005 /skel/usr/local/bin/sperl5.8.7
-124664690 ---s--x--x  2 root  wheel   103960 Jul 23 08:58:06 2007 /skel/usr/local/bin/sudo
-124664690 ---s--x--x  2 root  wheel   103960 Jul 23 08:58:06 2007 /skel/usr/local/bin/sudoedit
-124664996 -rws--x--x  1 root  wheel   270468 Jul 23 15:25:40 2007 /skel/usr/local/bin/xterm
+124664953 ---s--x--x  2 root   wheel   103928 Aug 20 09:36:53 2007 /skel/usr/local/bin/sudo
+124664953 ---s--x--x  2 root   wheel   103928 Aug 20 09:36:53 2007 /skel/usr/local/bin/sudoedit
+124664951 -rws--x--x  1 root   wheel   270468 Jul 30 15:41:35 2007 /skel/usr/local/bin/xterm
 124698111 -rwsr-xr-x  1 root  bin      11451 Jun 27 14:18:28 2003 /skel/usr/local/frontpage/version5.0/apache-fp/_vti_bin/fpexe
+124967242 -r-sr-xr-x  1 games  wheel    14156 Jul 30 17:18:13 2007 /skel/usr/local/libexec/emacs/22.1/i386-freebsd/update-game-score
 125023737 -r-s--x--x  1 root  wheel     7744 Jun 27 16:08:23 2007 /skel/usr/local/sbin/sinfo
 125401144 -r-xr-sr-x  1 root  daemon   43112 Nov  3 01:11:47 2005 /skel/usr/sbin/lpc
 125401191 -r-sr-xr-x  1 root  wheel    23264 Nov 18 08:56:11 2005 /skel/usr/sbin/traceroute
 125401192 -r-sr-xr-x  1 root  wheel    16916 Nov 18 08:56:18 2005 /skel/usr/sbin/traceroute6
-125686083 -r-sr-xr-x  1 man   wheel    33152 Mar 12 11:24:42 2007 /skel/var/tmp/instmp.fCjVXx/bin/jman
-125686084 -r-sr-xr-x  1 man   wheel    33152 Mar 12 11:24:42 2007 /skel/var/tmp/instmp.stFjdP/bin/jman
 124664331 -r-sr-xr-x  1 man   wheel      33152 Mar 12 11:24:42 2007 /usr/X11R6/bin/jman
 124664368 -rwxr-sr-x  1 root  mail       12784 Nov 17 18:17:16 2005 /usr/X11R6/bin/lockfile
 124664406 -rwxr-sr-x  1 root  mail        7668 Jul  2 09:23:09 2007 /usr/X11R6/bin/muttng_dotlock
 124664700 -rwsr-sr-x  1 root  mail       74140 Nov 17 18:17:16 2005 /usr/X11R6/bin/procmail
 124664757 -rws--x--x  1 root  wheel     949226 Nov 14 15:32:22 2005 /usr/X11R6/bin/sperl5.8.7
-124664690 ---s--x--x  2 root  wheel     103960 Jul 23 08:58:06 2007 /usr/X11R6/bin/sudo
-124664690 ---s--x--x  2 root  wheel     103960 Jul 23 08:58:06 2007 /usr/X11R6/bin/sudoedit
-124664996 -rws--x--x  1 root  wheel     270468 Jul 23 15:25:40 2007 /usr/X11R6/bin/xterm
+124664953 ---s--x--x  2 root  wheel     103928 Aug 20 09:36:53 2007 /usr/X11R6/bin/sudo
+124664953 ---s--x--x  2 root  wheel     103928 Aug 20 09:36:53 2007 /usr/X11R6/bin/sudoedit
+124664951 -rws--x--x  1 root  wheel     270468 Jul 30 15:41:35 2007 /usr/X11R6/bin/xterm

Checking for uids of 0:
root 0
toor 0

Checking for passwordless accounts:

jackjohnson.nethosting.com login failures:
Sep 26 03:14:40 jackjohnson sshd[95405]: Failed password for root from 208.29.134.206 port 14949 ssh2

jackjohnson.nethosting.com refused connections:

-- End of security output --


haha - 2025