LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 03-31-2010, 06:09 PM   #1
mike2010
Member
 
Registered: Jan 2009
Posts: 132

Rep: Reputation: 15
weird thing just now..


I was doing my normal backup routine with WinSCP. Backing up from the server to my desktop. (remote server) It usually takes about 2 or 3 hours to finish completely.

But while it was 74% complete, I got a WinSCP message that said "eterm already exists" . And it gave me the typical prompt asking me what i'd like to do next. (overwrite, yes, no, etc )

This was very weird...as I was coping the directory to a completely empty directory on my desktop. There was nothing at all in there beforehand. Why would it ask me something like that ?

Then I google'd 'eterm' and got a little more paranoid. Initially I did say yes to copy...but after I saw the google results, I canceled all.

Any idea what could of happened ? I'm redoing the backup again now...with root access.
 
Old 04-01-2010, 12:31 AM   #2
MS3FGX
LQ Guru
 
Registered: Jan 2004
Location: NJ, USA
Distribution: Slackware, Debian
Posts: 5,852

Rep: Reputation: 361Reputation: 361Reputation: 361Reputation: 361
Why would the Google results for "eterm" make you suspicious? For that matter, what exactly makes you think this is a security issue?

As I understand it, you were copying files from a Linux machine onto a Windows machine with Windows software, and the software said the file existed on the local machine already. It is indeed a little odd, but I am straining to think of any way that could be a security issue or evidence of a possible break-in.

Is there some specific case you found references to online which showed behavior like this was linked to a security issue?
 
Old 04-01-2010, 11:20 PM   #3
mike2010
Member
 
Registered: Jan 2009
Posts: 132

Original Poster
Rep: Reputation: 15
MS3, its just that i've never seen my WinSCP transfer be interrupted like that before mid-way through the 'copying' (backing up) process. As if something got in there or hacked the connection midway through.

I never downloaded or had anything related to eterm in my download....or to the place it was downloading to. (it was a brand new , empty folder created a minute before the download started)

With all this being said, I haven't noticed any suspicious behavior since.
 
Old 04-01-2010, 11:24 PM   #4
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Have you searched their bug tracker? It wouldn't be the first time WinSCP has been afflicted by this kind of bug.

Last edited by win32sux; 04-02-2010 at 12:15 AM.
 
Old 04-02-2010, 11:30 PM   #5
mike2010
Member
 
Registered: Jan 2009
Posts: 132

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by win32sux View Post
Have you searched their bug tracker? It wouldn't be the first time WinSCP has been afflicted by this kind of bug.
Thx for the bugtracker. But what do you think causes those issues ? I have a version thats like 2 years old too..

They can hack in or something ?
 
Old 04-03-2010, 12:03 AM   #6
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by mike2010 View Post
Thx for the bugtracker.
No problem.

Quote:
But what do you think causes those issues ?
A programming error most likely, as with most bugs. I don't know the specifics, as I'm not a programmer. Also, the software's maintainer didn't provide an explanation when he stated the fix had been applied AFAICT.

Quote:
I have a version thats like 2 years old too..
Why don't you upgrade to the latest stable version?

Quote:
They can hack in or something ?
Honestly, this bug doesn't sound like the type to allow for that sort of thing. Of course, you never know — and running old, unmaintained software is sort of like asking for trouble IMHO.

Last edited by win32sux; 04-03-2010 at 12:08 AM.
 
Old 04-04-2010, 03:58 PM   #7
mike2010
Member
 
Registered: Jan 2009
Posts: 132

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by win32sux View Post

Why don't you upgrade to the latest stable version?
Because i'm a douche & put things off for awhile sometimes.
 
Old 04-04-2010, 06:49 PM   #8
MS3FGX
LQ Guru
 
Registered: Jan 2004
Location: NJ, USA
Distribution: Slackware, Debian
Posts: 5,852

Rep: Reputation: 361Reputation: 361Reputation: 361Reputation: 361
That's probably not the best mindset to have while asking questions in "Security".
 
Old 04-05-2010, 09:08 AM   #9
mike2010
Member
 
Registered: Jan 2009
Posts: 132

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by MS3FGX View Post
That's probably not the best mindset to have while asking questions in "Security".
I know, but i've got a million things on my mind at once. The internet has ruined me.

I figured WinSCP is the least of my concerns.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Such a weird thing. 0xMarvel Linux - Newbie 11 07-10-2008 07:14 AM
weird booting ctrl-d thing NosLycn Debian 3 10-13-2004 05:41 PM
openbsd, weird cp thing. potetgull *BSD 2 09-17-2004 01:43 PM
Weird thing Andreas T. Linux - General 1 05-10-2002 03:12 PM
weird thing... kizaroth Linux - Newbie 3 10-21-2001 02:21 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:36 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration