PDA

Visualizza la versione completa : [Ubuntu 8.10] Errore su SSH


cyberfido
07-11-2011, 15:04
Ciao a tutti,
ho un server Ubuntu 8.10 e da stamani, senza una causa apparente, appena mi collego via SSH mi dice così

*** invalid open call: O_CREAT without mode ***: sshd: root@pts/0 terminated ======= Backtrace: ========= /lib/libc.so.6(__fortify_fail+0x37)[0x7fa143f5b887] /lib/libc.so.6[0x7fa143f39d01] sshd: root@pts/0[0x41b668] sshd: root@pts/0[0x41bd68] sshd: root@pts/0[0x41be80] sshd: root@pts/0[0x40a073] sshd: root@pts/0[0x4124a9] sshd: root@pts/0[0x4126a4] sshd: root@pts/0[0x412804] sshd: root@pts/0[0x41299d] sshd: root@pts/0[0x40bf83] sshd: root@pts/0[0x42d44f] sshd: root@pts/0[0x40ceea] sshd: root@pts/0[0x412d3f] sshd: root@pts/0[0x407466] /lib/libc.so.6(__libc_start_main+0xe6)[0x7fa143e7a466] sshd: root@pts/0[0x405b09] ======= Memory map: ======== 00400000-00447000 r-xp 00000000 08:01 1904885 /usr/sbin/sshd 00646000-00647000 r--p 00046000 08:01 1904885 /usr/sbin/sshd 00647000-00648000 rw-p 00047000 08:01 1904885 /usr/sbin/sshd 00648000-0074f000 rw-p 00648000 00:00 0 00fb3000-00fd4000 rw-p 00fb3000 00:00 0 [heap] 7fa142ec5000-7fa142edb000 r-xp 00000000 08:01 933958 /lib/libgcc_s.so.1 7fa142edb000-7fa1430db000 ---p 00016000 08:01 933958 /lib/libgcc_s.so.1 7fa1430db000-7fa1430dc000 r--p 00016000 08:01 933958 /lib/libgcc_s.so.1 7fa1430dc000-7fa1430dd000 rw-p 00017000 08:01 933958 /lib/libgcc_s.so.1 7fa1430dd000-7fa1430ef000 r-xp 00000000 08:01 934168 /lib/libresolv-2.8.90.so 7fa1430ef000-7fa1432ee000 ---p 00012000 08:01 934168 /lib/libresolv-2.8.90.so 7fa1432ee000-7fa1432ef000 r--p 00011000 08:01 934168 /lib/libresolv-2.8.90.so 7fa1432ef000-7fa1432f0000 rw-p 00012000 08:01 934168 /lib/libresolv-2.8.90.so 7fa1432f0000-7fa1432f2000 rw-p 7fa1432f0000 00:00 0 7fa1432f2000-7fa1432f6000 r-xp 00000000 08:01 934107 /lib/libnss_dns-2.8.90.so 7fa1432f6000-7fa1434f6000 ---p 00004000 08:01 934107 /lib/libnss_dns-2.8.90.so 7fa1434f6000-7fa1434f7000 r--p 00004000 08:01 934107 /lib/libnss_dns-2.8.90.so 7fa1434f7000-7fa1434f8000 rw-p 00005000 08:01 934107 /lib/libnss_dns-2.8.90.so 7fa1434f8000-7fa143638000 rw-s 00000000 00:09 18025 /dev/zero (deleted) 7fa143638000-7fa143643000 r-xp 00000000 08:01 934115 /lib/libnss_files-2.8.90.so 7fa143643000-7fa143842000 ---p 0000b000 08:01 934115 /lib/libnss_files-2.8.90.so 7fa143842000-7fa143843000 r--p 0000a000 08:01 934115 /lib/libnss_files-2.8.90.so 7fa143843000-7fa143844000 rw-p 0000b000 08:01 934115 /lib/libnss_files-2.8.90.so 7fa143844000-7fa14384e000 r-xp 00000000 08:01 934163 /lib/libnss_nis-2.8.90.so 7fa14384e000-7fa143a4d000 ---p 0000a000 08:01 934163 /lib/libnss_nis-2.8.90.so 7fa143a4d000-7fa143a4e000 r--p 00009000 08:01 934163 /lib/libnss_nis-2.8.90.so 7fa143a4e000-7fa143a4f000 rw-p 0000a000 08:01 934163 /lib/libnss_nis-2.8.90.so 7fa143a4f000-7fa143a57000 r-xp 00000000 08:01 934106 /lib/libnss_compat-2.8.90.so 7fa143a57000-7fa143c56000 ---p 00008000 08:01 934106 /lib/libnss_compat-2.8.90.so 7fa143c56000-7fa143c57000 r--p 00007000 08:01 934106 /lib/libnss_compat-2.8.90.so 7fa143c57000-7fa143c58000 rw-p 00008000 08:01 934106 /lib/libnss_compat-2.8.90.so 7fa143c58000-7fa143c5a000 r-xp 00000000 08:01 934098 /lib/libdl-2.8.90.so 7fa143c5a000-7fa143e5a000 ---p 00002000 08:01 934098 /lib/libdl-2.8.90.so 7fa143e5a000-7fa143e5b000 r--p 00002000 08:01 934098 /lib/libdl-2.8.90.so 7fa143e5b000-7fa143e5c000 rw-p 00003000 08:01 934098 /lib/libdl-2.8.90.so 7fa143e5c000-7fa143fc5000 r-xp 00000000 08:01 934087 /lib/libc-2.8.90.so 7fa143fc5000-7fa1441c4000 ---p 00169000 08:01 934087 /lib/libc-2.8.90.so 7fa1441c4000-7fa1441c8000 r--p 00168000 08:01 934087 /lib/libc-2.8.90.so 7fa1441c8000-7fa1441c9000 rw-p 0016c000 08:01 934087 /lib/libc-2.8.90.so 7fa1441c9000-7fa1441ce000 rw-p 7fa1441c9000 00:00 0 7fa1441ce000-7fa1441d7000 r-xp 00000000 08:01 934093 /lib/libcrypt-2.8.90.so 7fa1441d7000-7fa1443d6000 ---p 00009000 08:01 934093 /lib/libcrypt-2.8.90.so 7fa1443d6000-7fa1443d7000 r--p 00008000 08:01 934093 /lib/libcrypt-2.8.90.so 7fa1443d7000-7fa1443d8000 rw-p 00009000 08:01 934093 /lib/libcrypt-2.8.90.so 7fa1443d8000-7fa144406000 rw-p 7fa1443d8000 00:00 0 7fa144406000-7fa144569000 r-xp 00000000 08:01 1901941 /usr/lib/libcrypto.so.0.9.8 7fa144569000-7fa144768000 ---p 00163000 08:01 1901941 /usr/lib/libcrypto.so.0.9.8 7fa144768000-7fa144775000 r--p 00162000 08:01 1901941 /usr/lib/libcrypto.so.0.9.8 7fa144775000-7fa14478b000 rw-p 0016f000 08:01 1901941 /usr/lib/libcrypto.so.0.9.8 7fa14478b000-7fa14478f000 rw-p 7fa14478b000 00:00 0 7fa14478f000-7fa1447a5000 r-xp 00000000 08:01 934103 /lib/libnsl-2.8.90.so 7fa1447a5000-7fa1449a4000 ---p 00016000 08:01 934103 /lib/libnsl-2.8.90.so 7fa1449a4000-7fa1449a5000 r--p 00015000 08:01 934103 /lib/libnsl-2.8.90.so 7fa1449a5000-7fa1449a6000 rw-p 00016000 08:01 934103 /lib/libnsl-2.8.90.so 7fa1449a6000-7fa1449a8000 rw-p 7fa1449a6000 00:00 0 7fa1449a8000-7fa1449bf000 r-xp 00000000 08:01 1902446 /usr/lib/libz.so.1.2.3.3 7fa1449bf000-7fa144bbe000 ---p 00017000 08:01 1902446 /usr/lib/libz.so.1.2.3.3 7fa144bbe000-7fa144bc0000 rw-p 00016000 08:01 1902446 /usr/lib/libz.so.1.2.3.3 7fa144bc0000-7fa144bc2000 r-xp 00000000 08:01 934173 /lib/libutil-2.8.90.so 7fa144bc2000-7fa144dc1000 ---p 00002000 08:01 934173 /lib/libutil-2.8.90.so 7fa144dc1000-7fa144dc2000 r--p 00001000 08:01 934173 /lib/libutil-2.8.90.so 7fa144dc2000-7fa144dc3000 rw-p 00002000 08:01 934173 /lib/libutil-2.8.90.so 7fa144dc3000-7fa144de2000 r-xp 00000000 08:01 933960 /lib/ld-2.8.90.so 7fa144e83000-7fa144fc3000 rw-s 00000000 00:09 18003 /dev/zero (deleted) 7fa144fd3000-7fa144fd7000 rw-p 7fa144fd3000 00:00 0 7fa144fde000-7fa144fe1000 rw-p 7fa144fde000 00:00 0 7fa144fe1000-7fa144fe2000 r--p 0001e000 08:01 933960 /lib/ld-2.8.90.so 7fa144fe2000-7fa144fe3000 rw-p 0001f000 08:01 933960 /lib/ld-2.8.90.so 7ffff361e000-7ffff3633000 rw-p 7ffffffea000 00:00 0 [stack] 7ffff3640000-7ffff3641000 r-xp 7ffff3640000 00:00 0 [vdso] ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall] Connection to mioserver closed.

ho googlato tutta la mattina ma non ho trovato niente che mi sembrasse significativo.
suggerimenti?
grazie mille

deleted_29
07-11-2011, 23:41
http://wiki.hping.org/20

forse un bug di ssh che è stato "bombato"?
in quel caso tocca riavviare via kvm (se puoi) ed aggiornare

cyberfido
08-11-2011, 10:30
ciao,
scusa l'ignoranza.
per bombato intendi che ha ricevuto un attacco ddos?
e per aggiornare intendi aggiornare il servizio di ssh?

deleted_29
08-11-2011, 23:11
Originariamente inviato da cyberfido
ciao,
scusa l'ignoranza.
per bombato intendi che ha ricevuto un attacco ddos?
e per aggiornare intendi aggiornare il servizio di ssh? può essere, difficile da dire, ma è un'ipotesi plausibile

Loading