root kit upgrade?

From: Harmon Seaver <hseaver.a.t.cybershamanix.com>
Date: Thu Oct 30 2003 - 09:21:15 EST

  I had a weird thing happen last night. I was trying to get the libxft source
and it would start working (apt-get source libxft2) but then fail with this:

sh: line 1: dpkg-source: command not found
Unpack command 'dpkg-source -x xft_2.1.2-4.dsc' failed.

   So after looking at the dpkg man page, I decided to try upgrading dpkg, with
the command "apt-get upgrade dpkg". This upgraded a bunch of other stuff, which
I thought were just dependencies, but included with that were upgrades of passwd
and login -- which sounds more like getting hacked with a root kit.
   Should I be concerned? Both /usr/bin/passwd and /bin/login now have the dates
of 10/25/03 although this was done on 10/29, so I'm assuming that 10/25 was the
date they were created? Size of passwd is 25168 and login is 32836.

-- 
Harmon Seaver	
CyberShamanix
http://www.cybershamanix.com
Received on Thu Oct 30 14:21:43 2003

This archive was generated by hypermail 2.1.8 : Tue May 04 2004 - 09:42:41 EDT