rkhunter fail

[shann]

Hello Guys,

I have just run rkhunter and got the following error messages.


/sbin/depmod [ BAD ]
/sbin/ifconfig [ OK ]
/sbin/init [ OK ]
/sbin/insmod [ BAD ]
/sbin/modinfo [ BAD ]

Is this box compromized or any suggegestions please?

 

[chirpy]

Probably false-positives since rkhunter haven't updated their databases for around 6 months. What OS is this for?

 

[shann]

Hi,

We are running Red Hat Enterprise Linux ES release 3 (Taroon Update 1) and kernel is 2.6.10.

I have updated the rkhunter database and run it again and got same issues. I beleive rkhunter didn't update their databse as you said.

 

[chirpy]

Most likely.

However, you should upgrade your OS (to RHEv3.8) and your kernel which is exploitable to the latest version on kernel.org since you're running a custom kernel.