Security Incidents mailing list archives

FW: File Folders Own Changed


From: "Faisal" <fais () silk net pk>
Date: Wed, 4 Jun 2003 20:39:53 -0700


Hi,

I just configured a web site on my RH7.2 box running
apache-1.3.27-1.7.2.

After defining web site about 15 minutes later I found that permissions
and owner of the web site files are changed to something like this. 

drwxrwxrwx    6 544      401          4096 Jun  3 16:29 admin
-rwxr-xr-x    1 root     root        14604 Jun  4 11:48 admin.php
-rwxrwxrwx    1 544      401          2039 Sep 16  2002 auth.php
drwxr-xr-x    3 root     root         4096 Jun  4 13:14 backup
-rwxrwxrwx    1 544      401         14976 Sep 16  2002 banners.php
-rwxrwxrwx    1 544      401          2632 Sep 16  2002 footer.php
-rwxrwxrwx    1 544      401          1987 Sep 16  2002 header.php
drwxrwxrwx   14 544      401          4096 Jun  4 11:26 images
drwxrwxrwx    2 544      401          4096 Jun  3 16:29 includes
-rwxrwxrwx    1 544      401          2295 Sep 16  2002 index.php
drwxrwxrwx    2 544      401          4096 Jun  4 12:01 language
drwxrwxrwx   28 544      401          4096 Jun  4 10:48 navigation
-rwxr-xr-x    1 root     root         4356 Jun  4 11:23 navigation.php
-rwxrwxrwx    1 544      401           170 Sep 16  2002 robots.txt
drwxr-xr-x    2 mysql    mysql        8192 Jun  4 13:16 sql

I have no ftp server running on this box neither wu-ftp or ftpdpro.

It's local company site.

Any one has any idea I am feeling compromised? 

Faisal Ashraf 


----------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: