yep..twas a kiddie

Sure nuff.. some script kiddie sniffed a user's password and attempted to run a few exploits on the machine. Thankfully, I think I was patched for all/most of them. The person wasn't too smart -- they left their bash history and other evidence. They had a few exploit tarballs for different distros.. SuSE had 5.1 to 6.3. Unfort. that box is in another town.. is there a simple way to update to 6.3 w/o having to physically attend to the machine? I'm won' t be able to make it down there until next Sunday. I've still got the exploits tarballed away if anyone wants to a take alook.. its just run-of-the-mill exploits like the cron exploit, and the x /tmp file exploit. among others.... thanks for all the help, yall. Chrissy