RE: [cobalt-users] Howto trace hack [SCANNED]

["Phil Beynon" <phil@xxxxxxxxxxxxxxxxxxxxxxxxx>]

> It's a reported vulnerability
> http://www.securiteam.com/unixfocus/6Y00M208UK.html
> with a fix ;-)
>
> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Dave's List Addy
> Sent: vrijdag 19 maart 2004 18:31
> To: Users
> Subject: Re: [cobalt-users] Howto trace hack [SCANNED]
>
>
> On 3/19/04 10:59 AM, "Crocket" wrote:
>
> > If not I will remove those modules from the sites and warn my customers.
>
> Crocket, remove that module, or hit the PHPNuke site and see if
> they have a
> fix. Or turn off the feature that allows a visitor to upload into that
> module.
> --
> Thanks!!
> David Thurman
> List Only at Web Presence Group Net

What about firewalling out the ip address as well of the site that the wget
is working from. Not as good as having the fix applied but it may slow them
in the meantime.

Phil


** http://www.diygear.com THE Online DIY Toolstore For DIY & Business
** Infolink Electronic Systems Ltd. http://www.infolinkelectronics.co.uk
** Professional Web Design & Cobalt Hosting Solutions
** Sun Cobalt iForce Reseller - Canon Silver Reseller
** Contact: Sales@xxxxxxxxxxxxxxxxxxxxxxxxx
** Tel / Fax 0121 458 4894 (office) 0121 441 3558 (home)