Re: Attacks in Apache servers

2013-05-07 Thread M Eashwar
Hi All, Thanks for your views. It seems to be like very difficult to come for a conclusion :-) Regards Eashwar On Thu, May 2, 2013 at 11:08 PM, David N. Smith wrote: > > > > Didn't you know that 'rm' was vulnerable on Linux?!?! > > > > An attacker with escalated privileges can -- thro

Re: Attacks in Apache servers

2013-05-02 Thread David N. Smith
> > Didn't you know that 'rm' was vulnerable on Linux?!?! > > An attacker with escalated privileges can -- through clever use of > this misunderstood command with code so complicated, that this > enormous vulnerability went unnoticed for decades -- wreak havoc on > any Linux system connected to t

Re: Attacks in Apache servers

2013-05-02 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 5/2/13 7:42 AM, Mark Thomas wrote: > On 02/05/2013 12:29, Jess Holle wrote: >> http://blogs.cisco.com/security/linuxcdorked-faqs/ claims this is >> not a cPanel vulnerability per se... > > To quote the relevant part of that article: > >

Re: Attacks in Apache servers

2013-05-02 Thread Mark Thomas
On 02/05/2013 12:29, Jess Holle wrote: > http://blogs.cisco.com/security/linuxcdorked-faqs/ claims this is not a > cPanel vulnerability per se... To quote the relevant part of that article: How are attackers gaining access to the host servers? How the attackers are gaining root access to begin w

Re: Attacks in Apache servers

2013-05-02 Thread Jess Holle
http://blogs.cisco.com/security/linuxcdorked-faqs/ claims this is not a cPanel vulnerability per se... On 5/2/2013 6:22 AM, Darryl Lewis wrote: "Last Friday (April 26), ESET and Sucuri simultaneously blogged about the discovery of Linux/Cdorked, a backdoor impacting Apache servers running cPane

Re: Attacks in Apache servers

2013-05-02 Thread Darryl Lewis
"Last Friday (April 26), ESET and Sucuri simultaneously blogged about the discovery of Linux/Cdorked, a backdoor impacting Apache servers running cPanel." -http://blogs.cisco.com/security/linuxcdorked-faqs/ So it looks like an cPanel application vulnerability, not an Apache vulnerability. The titl

Re: Attacks in Apache servers

2013-05-02 Thread Brian Burch
On 02/05/13 09:32, André Warnier wrote: M Eashwar wrote: Hi, Anyone attacked with reference to below URL? http://efytimes.com/e1/fullnews.asp?edid=105167&ntype=mor&edate=4/29/2013 Never heard of "EFYtimes" before, but considering what I have been reading lately about bots, I would advise

Re: Attacks in Apache servers

2013-05-02 Thread André Warnier
M Eashwar wrote: Hi, Anyone attacked with reference to below URL? http://efytimes.com/e1/fullnews.asp?edid=105167&ntype=mor&edate=4/29/2013 Never heard of "EFYtimes" before, but considering what I have been reading lately about bots, I would advise a modicum of caution before following t

Attacks in Apache servers

2013-05-02 Thread M Eashwar
Hi, Anyone attacked with reference to below URL? http://efytimes.com/e1/fullnews.asp?edid=105167&ntype=mor&edate=4/29/2013