On Thu, 18 Sep 2003, Christian Storch wrote: > Don't forget to try to find the potential hole first! > Otherwise you could have a fast recurrence. > [..] > > > in /etc/.rpn theres a .bash_history with the following content: > > > >id > > > >mkdir /etc/.rpn > > > >ps -aux > > > >ps -aux | grep tbk > > > >kill -15292 pid > > > >kill 15292 > > > >netconf > > > >locate httpd.conf > > > >cd /etc/.rpn > > > >ls -al > > > >wget > > > >cd /var/www/cncmap/www/upload/renegade > > > >ls -al > > > >rm -rf phpshell.php ^__________^ was this the exploited hole ? thx for info a++ maks -- free software is not free at all, and "actually a different form of monopoly" ARLENE MCCARTHY member of the european parliament (labour party) -> http://swpat.ffii.org/#guardian-nhill030619 please pay attention avoiding software patents: -> http://swpat.ffii.org/index.en.html
Attachment:
pgptlA88XWdFU.pgp
Description: PGP signature