[EMAIL PROTECTED] Found the origine of Fake in error_log

Hello all, i found from where come the famous Fakename ... Is was a hack ... here is the trace from strace : rt_sigaction(SIGCHLD, {SIG_DFL}, {0x8075920, [], SA_RESTORER, 0x44751868}, 8) = 0 execve("./yy", ["./yy", "-s", "\"/bin/bash\"", "./soft"], [/* 34 vars */]) = 0 uname({sys="Linux", node="

Re: [EMAIL PROTECTED] Fakename in error_log

> On 1/27/07, Philippe BEAU <[EMAIL PROTECTED]> wrote: >> Hello all, >> >> I have an Apache 1.3.37 with SSL compiled in 2.8.28 (modssl). I have found >> someone is playing with and launch this : >> >> ==> Fakename: "/bin/xxx" PidNum: 2537

[EMAIL PROTECTED] Fakename in error_log

Hello all, I have an Apache 1.3.37 with SSL compiled in 2.8.28 (modssl). I have found someone is playing with and launch this : ==> Fakename: "/bin/xxx" PidNum: 25370 ==> Fakename: "/bin/xxx" PidNum: 13361 I would like to know where this "Fakename" come from and is anyone have an idea of how i c