Gaby vanhegan wrote:
I'm running 3.6 (yes, due for an upgrade) and I keep getting hit by
some hackers that are using a bug I can't track down to download perl
scripts into /tmp:
[EMAIL PROTECTED] 11:26]# cd /tmp/
[EMAIL PROTECTED] 11:26]# ls -lFa
total 76
drwxrwxrwt 2 root wheel 512 Mar 15 12:21 ./
drwxr-xr-x 22 root wheel 512 Jun 29 2005 ../
-rw-r--r-- 1 www wheel 0 Mar 14 22:14 .alekspwned2
-rw-r--r-- 1 www wheel 0 Mar 14 20:41 .balum
-rw-r--r-- 1 www wheel 0 Mar 13 22:36 .mladen3
-rw-r--r-- 1 www wheel 321 Mar 14 20:41 alekshah
-rw-r--r-- 1 www wheel 320 Mar 14 20:41 alekshah2
-rw-r--r-- 1 www wheel 3589 Mar 14 22:14 alekspwned
-rw-r--r-- 1 www wheel 19309 Mar 14 22:14 alekspwned2
Are you running Apache chroot?
--
Darrin Chandler | Phoenix BSD Users Group
[EMAIL PROTECTED] | http://bsd.phoenix.az.us/
http://www.stilyagin.com/ |
