home | list info | list archive | date index | thread index

Re: [OCLUG-Tech] More: Yes, this is this a known exploit!

On 03/10/08 Alex H. Vandenham said:

> OK, it's an irc bot that got on my system in some way - probably (?) a php 
> exploit.  If anyone knows what I have to do to tighten up php to prevent file 
> uploads from inserted urls - help much appreciated!
> 
> After deleting the bot files in /tmp the tcp traffic to ports 6660-7000 is 
> gone after a system restart.   A full upgrade and re-install appears to be in 
> my future . . . 

Stop using PHP. No, seriously. It has a horrid security record.

Mike

Attachment: pgpfY1ySUZIay.pgp
Description: PGP signature