-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>>>>> "Shishir" == Shishir Birmiwal <[EMAIL PROTECTED]> writes:

    Shishir> Hi
    >> > > > But, I got the following page :
    >> > 
    >> > Problems... please wait.
    >> 
    >> Take a look at http://203.200.89.84/ (that's the IP of
    >> www.linux-india.org)
    >> 
    >> The machine's been hacked.

    Shishir> But that says- 403 Forbidden You don't have permission to
    Shishir> access / on this server :(

I manage the server on which the Linux-India.org site is hosted.

Yes, the server was cracked into.  As far as I can make out, it was
through a PHP injection vulnerability.  I think I've managed to
disable the injection vector now.  The crack was NOT LI-specific.  If
you find more issues on the server, I'd appreciate it if you brought
them to my notice first before posting on the list.

Apologies for the inconvenience.  I have a couple of seriously
sarcastic things to say here, but I think I'll restrain myself today
:)

Regards,

- -- Raju
- -- 
Raj Mathur                [EMAIL PROTECTED]      http://kandalaya.org/
       GPG: 78D4 FC67 367F 40E2 0DD5  0FEF C968 D0EF CC68 D17F
                      It is the mind that moves
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.8 <http://mailcrypt.sourceforge.net/>

iD8DBQFBoXC4yWjQ78xo0X8RAh36AJ9nRKP0Ez1V6GNUA9o1pYHokdw6XwCdF6xp
KyXVJqGLSSl1X2DTRbIp3HQ=
=VfMj
-----END PGP SIGNATURE-----


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to