Thread: Hacked server
View Single Post
  #6  
Old 22nd December 2010, 18:23
Captain Captain is offline
Senior Member
 
Join Date: Feb 2009
Posts: 287
Thanks: 82
Thanked 8 Times in 7 Posts
Default

Ok. If hacker have ftp access he can execute php or cgi pearl script and after that he have all access to all /var/www folders.
How it can be?
If you have ISPConfig2(Perfect server install) with final updates and ubuntu with final updates.

P.S. ispconfig user have shell with /bin/false or with /dev/null
And "ispconfigend" user - it is ispconfig user? I have this user.

Thnks

Last edited by Captain; 22nd December 2010 at 22:52.
Reply With Quote