[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Hacked ASP server on Raq4



Anyone seen this?

<html>

<head>
<title>::: Bug-Travel 0wnS y0u ::: Irc.Brasnet.Org #BugTravel</title>
</head>
<body bgcolor="#000000" text="606060">

<p align="center"><font face="fixedsys" size="8">-=[&nbsp; B u g - T r a v e
l&nbsp; ]=-</font></b></p>
<p align="center"><b><font face="verdana" size="5" color="990000">[ 0wnS y0u
simple b0x ]</font></p>
<p align="center"><b><font face="verdana" size="4">[ Admin Path in
b0x ]</font></p>
<p align="center"><b><font face="verdana" size="3">[ You want
Help ]</font></p>
<p align="center"><font face="verdana" size="1">[ <a
href="mailto:admin@xxxxxxxxxxxxxxxxxxxx";>E-Mail</a>
]</font></p>
<p align="center"><font face="verdana" size="4">-=[ :::: S  e  r  v  e  r
:::: ]=-</font></b></p>

<center>
<p align="center"><font face="fixedsys" size="3" color="yellow">-=[
uname ]=-</center></b></font>
<center>
<font size="2">
Linux fp4.atgi.net 2.2.16C32_III #1 Fri Nov 9 21:54:54 PST 2001 i586 unknown
<center>
<p align="center"><font face="fixedsys" size="3" color="yellow">-=[
id ]=-</center></b></font>
<center>
<font size="2">
uid=0(root) gid=0(root) groups=11(httpd)
<center>
<p align="center"><font face="fixedsys" size="3" color="yellow">-=[ Server
Name ]=-</center></b></font>
<center>
<font size="2">

I've reported this to CERT

but havn't heard anything back.


David McCall
UNIX Administrator
AdvancedTelcomGroup
david@xxxxxxxx