From nobody  Thu Jun 26 08:07:11 1997
Received: (from nobody@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id IAA25121;
          Thu, 26 Jun 1997 08:07:11 -0700 (PDT)
Message-Id: <199706261507.IAA25121@hub.freebsd.org>
Date: Thu, 26 Jun 1997 08:07:11 -0700 (PDT)
From: admin@arces.net
To: freebsd-gnats-submit@freebsd.org
Subject: files in /usr/local/etc are randomly becoming uuencoded other files or directories (changing themselves) and crashing the machine.
X-Send-Pr-Version: www-1.0

>Number:         3959
>Category:       misc
>Synopsis:       files in /usr/local/etc are randomly becoming uuencoded other files or directories (changing themselves) and crashing the machine.
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Jun 26 08:10:01 PDT 1997
>Closed-Date:    Sun Mar 22 11:28:40 PST 1998
>Last-Modified:  Sun Mar 22 11:30:16 PST 1998
>Originator:     Adrian Goins
>Release:        2.2.1
>Organization:
Darkangel Dementia
>Environment:
FreeBSD thorn.arces.net 2.2.1-RELEASE FreeBSE 2.2.1-RELEASE #0: Thu Jun 5 21:41:58 MDT 1997 root@myname.mydomain:/usr/src/sys/compile/THORN i386
>Description:
Over the last week i've noticed that files in /usr/local/etc are changing.  First it was some scripts i had written, which changed to uuencoded renditions of a ld.so file.  This morning I was receiving error messages from inetd that it couldn't execute tcpd.  /usr/local/etc/tcpd (which worked fine 7 hours ago) had become a directory with lib files in it.  Twenty minutes later (just a second ago), it's now a link to my anonymous ftp directory.  I run a secure site, so this isn't a crack, especially since you can't get to my machine anymore (since inetd can't execute tcpd).
>How-To-Repeat:
I don't know how to.  It's just happening randomly.  I"m going to make another backup of my crucial stuff and reinstall with 2.2.2-RELEASE.
>Fix:
Yeah.  Right.  Format the machine, I reckon.
>Release-Note:
>Audit-Trail:

From: Adrian Goins <monachus@arces.net>
To: freebsd-gnats-submit@freebsd.org
Cc:  Subject: Re: misc/3959 files in /usr/local/etc are randomly becoming uuencoded
Date: Sun, 22 Mar 1998 11:51:58 -0700

 --JLXZi4fr8Xoxs+9I
 Content-Type: text/plain; charset=us-ascii
 Content-Transfer-Encoding: quoted-printable
 
 Quoting Studded (Studded@dal.net):
 > 	I am writing to you in regards to your FreeBSD Problem
 > Report. The FreeBSD project is currently conducting a beta test on
 > version 2.2.6 and feedback as to whether you are still experiencing
 > your problem would be very valuable.=20
 
 this problem existed with 2.2.1 and was submitted over 9 months ago.  i
 have to say that i'm disappointed that you took so long to respond to the
 issue, but i'm now running a snapshot of 2.2.5 and have not experienced
 the problem since i reported it.
 
 > Doug
 
 --=20
 Regards,
 
 Adrian Goins - admin@arces.net
 Arces Network, Inc.
 http://www.arces.net
 719.282.8133 vox
 
 --JLXZi4fr8Xoxs+9I
 Content-Type: application/pgp-signature
 
 -----BEGIN PGP SIGNATURE-----
 Version: 2.6.2
 
 iQCVAwUBNRVdzv3qHshR21gJAQEDtwP/aawcRl3uY2GD0aDjpAezk8LouYURrk9X
 E7U3B2zD/uKe6dUv/Mgh3WxA/qVya5t1R7uf2Y6ujZtKrnaL2p0jHsDwOKOJL57c
 9r5j2DYbrmNk0AP13NORgh7imq98YOLUaX1+IAQkwdQHoWSC4NVGkKPA4PJvXQxr
 HEGGiqUhPDw=
 =PdGB
 -----END PGP SIGNATURE-----
 
 --JLXZi4fr8Xoxs+9I--
State-Changed-From-To: open->closed 
State-Changed-By: steve 
State-Changed-When: Sun Mar 22 11:28:40 PST 1998 
State-Changed-Why:  
Originator reports that the problem no longer exists in 2.2.5. 
>Unformatted:
