[lug] Strange modes

[D. Stimits]

Calvin Dodge wrote:
> 
> Chip Atkinson wrote:
> >
> > Greetings,
> >
> > I just discovered some weird file modes in my /usr/local/bin directory.
> > Here's an example:
> >
> > ?r-S--S--- 256 129      root     160582144 Oct  1  2028 glimpse
> > ?r-S--S--- 256 129      root     131616512 Oct  1  2028 glimpseindex
> > ?r-S--S--- 256 129      root     159824128 Oct  1  2028 glimpseserver
> 
> Whoa!
> 
> At first glance, it looks like a corrupt filesystem.  Have you run fsck on
> this?
> 
> If this is connected to the Internet, I also might suspect your box has been
> hacked.
> 
> But try fsck first.
> 
> Calvin
> 
> --
> Calvin Dodge
> Certified Linux Bigot
> http://www.caldodge.fpcc.net
> 
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug

I found a possible URL describing this:
ftp://metalab.unc.edu/pub/Linux/utils/text/glimpse-3.6.lsm

It doesn't appear to be a breakin, but such a program would be useful
to would-be's. Being SUID, anyone could find anything.