Hide Forgot
Description of problem: My mothers computer was hacked with a program that seems to be milw0rm. The hacker left the source file in C on her computer. I have it and the IP address of the FTP server that he seemed to download it from. I attached the file. Version-Release number of selected component (if applicable): 2.6.34.8-68.fc13.i686.PAE If you have any questions let me know
Created attachment 484321 [details] the file that was downloaded
This is CVE-2008-0009/CVE-2008-0010 which was fixed a long time ago. This exploit wasn't the program used to gain entry to the machine. On an affected machine, this exploit would have given a user account root privileges. It is not responsible for how the attacker got access to a user account in the first place. if everything was up to date, this exploit should have failed to give the attacker root.
The security bug that this program exploits was fixed in Linux 2.6.25-rc1 and 2.6.24.2, so there is no way it was used to gain root privileges on that machine.