[drupal-devel] A1TS hack?

Bob Doyle bobdoyle at skybuilders.com
Mon Jul 25 17:41:02 UTC 2005


Hi all,

Quite a few Drupal sites appear to have been hit by this hack in the 
last few days?

Linux servicesb.skybuilders.com 2.4.20-8 #1 Thu Mar 13 17:54:28 EST 2003 
i686 i686 i386 GNU/Linux
uid=0(root) gid=0(root) 
groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),503(skyapp)

*Nothing Deleted
*


They only replace the main index.php file and touch a couple of images 
folders (without altering or adding images).

Is there a fix to prevent this happening again?

-- 
Bob Doyle
Editor In Chief, CMS Review - http://www.cmsreview.com
Technology Adviser, CM Pros - http://www.cmprofessionals.org
CEO, skyBuilders - http://www.skybuilders.com
77 Huron Avenue
Cambridge, MA 02138
617-876-5678

-------------- next part --------------
Skipped content of type multipart/related


More information about the drupal-devel mailing list