Tru64 Security

From: <DYadav_at_docklands.vic.gov.au>
Date: Mon, 26 Nov 2001 11:16:05 +1100

hi Wizkids,
         I run eXcursion on my desktop whose name is dt102 to connect to
DS20E running Tru64 5.1 on my LAN Network. Recently I figured out certain
Xserver process running in the process list pointing to
/var/dt/authdir/authfiles/A:0-aaarxa .

root 1229 1 0.0 Nov 24 ?? 0.00.03 /usr/bin/X11/X :0 - auth
/var/dt/authdir/authfiles/A:0-aaarxa

When I opened the folder /var/dt/authdir/authfiles/ I found two files
A:0-aaarxa & Adt102:0-aaarxa


yesterday days back they were
A:0-aaasha & Adt102:0-aaasha


 I am worried that my server is getting hacked or some sort. Can somebody
explain me what these files are for.
        After looking in these file they look like some cookie sort of
thing with following text inside.
         ^RMIT-MAGIC-COOKIE-1^P ^Xg |^U 6

please bare with my ignorance.


PS: Sorry for the image file with this email....can not do much to stop it.
regards,

Dharmendra Yadav
---------------------------------------------------------------------------------

Oracle Database Administrator/Business Analyst
MELBOURNE DOCKLANDS AUTHORITY
Phone : +61 3 9628 4420 Mobile : +61 412 456 477
                                                                      
                                                                      
                                                                      
                          Visit Victoria's New Waterfront _at_
                               http://www.docklands.com
                                                                      
                 This document and any following pages are intended
                 solely for the named addressee, are confidential and
                 may be subject to legal or other professional
                 privilege. The copying or distribution of them or
                 any information they contain, by anyone other than
                 the addressee, is prohibited. If you have received
                 this document in error, please let us know by
                 telephone, and then return it by mail to the address
                 above. Any confidentiality or privilege is not
                 waived or lost because this has been sent to you by
                 mistake.
                                                                      
                                                                      
                                                                      
Received on Mon Nov 26 2001 - 00:17:31 NZDT

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:42 NZDT