[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] Cobalt Raq 4 Hacked
- Subject: Re: [cobalt-security] Cobalt Raq 4 Hacked
- From: "Silvester van der Leer" <cobaltsecure@xxxxxxxxx>
- Date: Sat, 29 Nov 2003 13:16:20 +0100
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
> I want to know if somebody has experienced the same
> issue, and any help will be apreciated..
Possibly your server is hacked using php, look for strange files in /tmp or
/home/tmp and also in your access log.
Some forum board like phpBB have some security leaks in it, which some
hackers misuse to install an bindshell or execute commands.
Beste way to stop this is to enable open_base_dir restriction in php en
disable exec rights, google for this to get more explanation
Silvester v.d. Leer