alter ego wrote:
My Linux box (SuSE 7.1, X, harden_suse) did strange things this morning and I wonder if there are some likely explanations or if this could be an attack:
- while opening a large mail (about 245 K) with the Netscape Mail Client, Netscape stopped responding to user input (window was not repainted as well) - I tried switching to an open X-Term, but was not able to move the focus to that window - Switched to another console, logged in and tried killing the netscape process -> console ceased accepting input - Logged in remotely via ssh, which at first worked, but behaved weirdly (keystrokes were not displayed until the next key pressed) - then ssh ceased accepting input as well - switched the box off (Painful) and rebooted and everything worked - checked the log files (also firewall logs - I am behind a corporate FW), but could not find anything
While this might not be a security related problem I'd appreciate any hints/tips/advice from the experts here.
Did you test to open the mail again after the reboot? maybe its some mad code in it? Netscape also has many memleaks .. maybe you've just read the mail on the wrong day for netscape ;) i would check the mail for some mad code. did you see the load of the maschine? -- Mit freundlichen Gruessen / best regards, Sven Michels Network Operating Center / Infrastructure ----------------------------------------- intraDAT AG Wilhelm Leuschner Strasse 7 u. 9-11 60329 Frankfurt / Germany Tel: +49 69 256 29 - 0 Fax: +49 69 256 29 - 256 http://www.intradat.com -----------------------------------------