My FC3 machine appears to be compromised, please help

AragonX aragonx at
Thu Apr 6 13:07:04 UTC 2006

<quote who="Bob Brennan">
> Hello,
> I have an FC3 machine that has been running about a dozen websites and
> 3 dozen mail accounts reliably for more than a year, I stopped
> updating about 6 months ago so the versions might be a bit stale but I
> would prefer to fix my immediate problem(s) rather than update and
> cause new ones. The software I am using that is in question, I
> believe, is Sendmail, Dovecote, Procmail, ClamAv, Spamassasin,and
> Squirrelmail.

Be sure to keep your squirrelmail updated and/or behind a password
protected directory.  I'm fairly sure there is a rootkit that exploits a
bug in squirrelmail.  It's an automated script so I think it's only a
problem if you have your squirrelmail in a directory named squirrelmail. 

This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

More information about the users mailing list