Questions... The System...
Notes:
What kind of system is this?
It turned out to be a Linux system, purchased used and preinstalled with an older version of Slackware. Lots and lots of likely exploits.
I'm told that they upgraded numerous software packages AFTER detecting the hacker. So I can expect whatever revision levels I find will be better that whatever the hacker had to overcome.
What is the system used for and what services are available on it?
The system is used to host web sites and provide E-Mail services. Some shell accounts with telnet access are present. Most accounts had /bin/false for a shell. An important note!
What is the system name and IP address.
Wit that information it was time to take my first peek.