[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] Cobalt Raq 4 Hacked
- Subject: [cobalt-security] Cobalt Raq 4 Hacked
- From: Pablo Medina <pemedina@xxxxxxxxx>
- Date: Tue, 4 Nov 2003 10:10:28 -0300 (ART)
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Hi all.
Today at 2:00 in the morning our RaQ4 was hacked.
The hack replaced all files named index.* with own
hacker content.
We have had this issue a couple of weeks ago. That
time the hack afected all index.* files under
/home/sites.
Now the hack affected all index.* files under / so the
Control Panel is affected too.
I must note a week ago the server wass rebuilded formm
scratch and ALL upgrades were applied.
I have chkrootkit and portsentry installed. None of
those reported strange activity.
I have checked open ports in the server and theres' no
strange ports opened.
I want to know if somebody has experienced the same
issue, and any help will be apreciated..
TIA
Pablo
------------
¡Ayudá a los chicos navegando!
En noviembre, Yahoo! dona un plato de comida por cada usuario que nevegue gratis con Yahoo! Conexión.
Conectate ya en http://conexion.yahoo.com.ar