eimajenthat commented on issue #1743: Found cron job after CouchDB server hacked URL: https://github.com/apache/couchdb/issues/1743#issuecomment-439465740 Looks like I'm running 1.5.0. Yikes! I installed it within the last month from apt. But this server's still on Ubuntu Trusty. I should look at upgrading to the latest LTS. And I should probably add the CouchDB repo, rather than relying on Ubuntu's repositories. I uninstalled CouchDB and deleted all trace of it, as I hadn't actually time to use it for anything yet on this server. When I reinstall (which I will, CouchDB is super cool), I'll make sure I get the updated version. Thanks for the info. Sorry about posting this in the wrong place. I was slightly frantic, trying to make sure the malicious code was purged for my system, but I wanted to preserve that pastebin, in case it could be helpful to the good guys. I sincerely hope I won't be lucky enough to discover more security issues, but if I do, I'll submit them to that email. Thanks!
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
