i am getting this email every minute does anybody know what it is
/bin/sh: line 0: kill: (17392) - No such process
chown root:root /var/tmp/h3 && chmod 4755 /var/tmp/h3 && rm -rf /etc/cron.d/core && kill -USR1 17392
i am getting this email every minute does anybody know what it is
/bin/sh: line 0: kill: (17392) - No such process
chown root:root /var/tmp/h3 && chmod 4755 /var/tmp/h3 && rm -rf /etc/cron.d/core && kill -USR1 17392
Login to the server via SSH and run crontab -l and check for any such cronjob executing every minute.
Smells like a local root exploit to me. If it's not too late, look in /etc/cron.d to see what core is and check if /var/tmp/h3 is still there...
http://forum.joomla.org/index.php?PH...&topic=86820.0
found the fault its here