[TYPO3-english] TYPO3 security levitra

2011-06-05 Thread michal_cygankiewicz
Recently my site is indexed not properly in Google. It looks as it has been 
hacked. Please type site:siatkowka.net in Google. However it looks properly 
when browsing in browser. TYPO3 version is 4.5.3. This site is hosted on 
dedicated server with one another TYPO3 installation, which is running 
properly. I sccanned my server in search for viruses.

Additionally I found in Google few other TYPO3 sites with similar problems:

http://webempoweredchurch.org/support/forum/posts/upgrading/typo3-44/
http://webcache.googleusercontent.com/search?q=cache:h1lU1hYy2rQJ:webempoweredchurch.org/support/forum/posts/upgrading/typo3-44/+typo3+levitracd=10hl=enct=clnkgl=plsource=www.google.pl

http://www.nex.ee/
http://webcache.googleusercontent.com/search?q=cache:2dfyRP-n22kJ:www.nex.ee/+typo3+levitracd=21hl=plct=clnkgl=plclient=firefox-asource=www.google.pl

http://www.baselarea.ch/en/news.rss
http://webcache.googleusercontent.com/search?q=cache:dzQQgUSXHeEJ:www.baselarea.ch/en/news.rss+typo3+levitracd=40hl=plct=clnkgl=plclient=firefox-asource=www.google.pl

All of above examples contains levitra spam content instead of real content 
when indexing in Google. 

Anyone had similar problem?

Regards,
Michal Cygankiewicz


Doladuj telefon przez Internet!
Sprawdz  http://linkint.pl/f29ba
___
TYPO3-english mailing list
TYPO3-english@lists.typo3.org
http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-english


Re: [TYPO3-english] TYPO3 security levitra

2011-06-05 Thread Olivier Dobberkau

Am 05.06.11 20:33, schrieb michal_cygankiew...@interia.pl:


Anyone had similar problem?


please contact secur...@typo3.org

do not discus hacked sites on mailinglists.

olivier
___
TYPO3-english mailing list
TYPO3-english@lists.typo3.org
http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-english


Re: [TYPO3-english] TYPO3 security levitra

2011-06-05 Thread Steffen Gebert

Hi Michal,

On 05.06.11 20:33, michal_cygankiew...@interia.pl wrote:

Recently my site is indexed not properly in Google. It looks as it has been hacked. 
Please type site:siatkowka.net in Google. However it looks properly when 
browsing in browser. TYPO3 version is 4.5.3. This site is hosted on dedicated server with 
one another TYPO3 installation, which is running properly. I sccanned my server in search 
for viruses.


You're not the first one mentioning this (however I currently only know 
a german blog posts about this). As to our knowledge, none of those 
hacked sites was hacked using an unknown TYPO3 core or (public) 
extension vulnerabilty. All site owners, which were able to provide 
details, identified other weaknesses (custom TYPO3 extension, weak FTP 
passwords, hacked other PHP software, etc).


As pointed out by Olivier, detailed information about the attack should 
not be presented in public. Please provide as much feedback as possible 
(used TYPO3 version, used extensions+versions, access logs (if 
possible), etc.) to the security team: security (AT) typo3 (DOT) org.


Thanks

Kind regards
Steffen

--
Steffen Gebert
TYPO3 v4 Core Team Member

TYPO3  inspiring people to share!
Get involved: http://typo3.org
___
TYPO3-english mailing list
TYPO3-english@lists.typo3.org
http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-english