Mise à jour apres de rkhunter

[hanlin]

Bonjour,
J'essaye d'apporter les corrections consillées après une analyse rkhunter.

[20:44:21]   Checking for hidden files and directories       [ Warning ]
[20:44:21] Warning: Hidden directory found: /dev/.udev
[20:44:21] Warning: Hidden file found: /etc/._cfg0000_monitrc: ASCII English text
[20:44:21] Warning: Hidden file found: /usr/share/man/man5/.k5login.5.bz2: bzip2 compressed data, block size = 900k
[20:44:27]
[20:44:27] Checking application versions...
[20:44:27] Info: Starting test name 'apps'
[20:44:28] Info: Application 'exim' not found.
[20:44:28]   Checking version of GnuPG                       [ Warning ]
[20:44:28] Warning: Application 'gpg', version '2.0.10', is out of date, and possibly a security risk.
[20:44:28] Info: Application 'httpd' not found.
[20:44:28]   Checking version of Bind DNS                    [ Warning ]
[20:44:28] Warning: Application 'named', version '9.4.2-P1', is out of date, and possibly a security risk.
[20:44:28]   Checking version of OpenSSL                     [ Warning ]
[20:44:28] Warning: Application 'openssl', version '0.9.8g', is out of date, and possibly a security risk.
[20:44:28]   Checking version of PHP                         [ OK ]
[20:44:28] Info: Application 'php' version '4.4.8_pre20070816' found.
[20:44:28] Info: Application 'procmail' not found.
[20:44:28]   Checking version of ProFTPd                     [ Warning ]
[20:44:28] Warning: Application 'proftpd', version '1.3.1rc2', is out of date, and possibly a security risk.
[20:44:28]   Checking version of OpenSSH                     [ Warning ]
[20:44:28] Warning: Application 'sshd', version '5.2p1', is out of date, and possibly a security risk.
[20:44:28] Info: Applications checked: 6 out of 9

Pourriez vous m'orienter quant aux lignes de commande à taper pour mettre à jour ces applications ?
Je suis sur Gentoo 2006.0 - 64 bits, release 2
Merci par avance.

 

[Julia41]

Sous Gentoo OVH, tu pourras pas mettre à jour ces applications qui sont vraiment outdated...
Bon, par contre ton bind a vraiment une faille de sécu si mes souvenirs sont bon.
ça te donne quoi un :

cat /etc/ovhrelease

?
T'es bien en 2.19 ?

 

[hanlin]

non je suis en 2.18
en plus je viens de lancer rkhunter et c as joli joli , je t'ai envoyé cela en pm

 

[Julia41]

Lance un patch all, ça devrait mettre à jour au moins ton bind (bon de tête j'aime pas la release 2 OVH)

cd /root/
wget ftp://ftp.ovh.net/made-in-ovh/release/patch-all.sh
sh patch-all.sh

Bon, d'après ton rapport RKHunter en PV, je dirais "rien d'alarmant", il te suffit d'aller voir les fichiers "suspect" (les codes hackés ont tout le temps des notes "je me la pète" )