rkhunter, TCP port 1524, false positive?

M

m0rgulvale

Member
Sep 18, 2009
10
0
51
hi, rkhunter shows the following results on one of my systems:


[22:15:59] Checking for TCP port 1524 [ Warning ]
[22:15:59] Warning: Network TCP port 1524 is being used by /usr/local/apache/bin/httpd. Possible rootkit: Possible FreeBSD (FBRK) Rootkit backdoor


the log also says:

FreeBSD Rootkit [ Not found ]




Additionally, I ran rkhunter a second time.... and this time it didn't show the port 1524 message



is this a false positive related to cpanel?
 
Last edited:
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
L RKHunter report question Security 1
chanklish rkhunter explanation Security 1
A rkhunter says __stack_chk_fail Security 4
ronaldst rkhunter warning package manager verification has failed Security 4
T RKHunter protection question Security 2
Similar threads
RKHunter report question
rkhunter explanation
rkhunter says __stack_chk_fail
rkhunter warning package manager verification has failed
RKHunter protection question
Top Bottom