The Community Forums

Interact with an entire community of cPanel & WHM users.
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

tcp_wrappers failed checksum test

Discussion in 'General Discussion' started by linuxrouter, Sep 7, 2006.

  1. linuxrouter

    linuxrouter Member

    Joined:
    Nov 10, 2005
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    Hello -

    I have a CPanel server, 10.8.1-R7 that has been sending notifications for the past month or so each night regarding a tcp_wrappers failed checksum.

    The message states:

    IMPORTANT: Do not ignore this email.
    This message is to inform you that the rpm
    package tcp_wrappers did not match the expected checksum. This could mean that
    your system was compromised (OwN3D). The offending files have been removed
    and replaced with the OS default. To be safe you should verify that your
    system has not be compromised.

    Modified Files:
    .......T /usr/include/tcpd.h
    S.5....T /usr/sbin/safe_finger
    S.5....T /usr/sbin/tcpd
    S.5....T /usr/sbin/try-from
    .......T d /usr/share/man/man3/hosts_access.3.gz
    .......T d /usr/share/man/man5/hosts_access.5.gz
    .......T d /usr/share/man/man5/hosts_options.5.gz
    .......T d /usr/share/man/man8/tcpd.8.gz

    I have swept the system to see if it has been compromised, but could not find any indication of that. I have also ran chkrootkit and rkhunter, neither of which found any root kits. Has anyone else received a notice like this and if so, have you found a fix?

    Thanks
     
  2. jsnape

    jsnape Well-Known Member

    Joined:
    Mar 11, 2002
    Messages:
    174
    Likes Received:
    0
    Trophy Points:
    16
    It's probably a false positive. Did it start happening after installing some software?
     
  3. marathon

    marathon Registered

    Joined:
    Feb 24, 2008
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    I am receibing this message (from mail) all days.

    Any solution?

    Tknaks
     
  4. hasilath

    hasilath Registered

    Joined:
    Jan 30, 2008
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    here also same problem can anyone HELP ??? pls..
     
Loading...

Share This Page