Jabberstudio.org, oh we're hacked

spoonfork



Tuesday, February 1. 2005

Jabberstudio.org, oh we're hacked

Its either a security oversight, or people are just too overwhelmed with real-life - but jabberstudio was hacked for one year and they've only noticed it now.
It has been discovered that the server hosting JabberStudio has been hacked (cracked if you want to say that) for what appears to be one year. Careful analysis of logs and other information shows that the attack was an automated rootkit and it was never used to view or alter files. Regardless, we feel it is vital that all files be reviewed for any malicious changes before they are copied over to new machines and publicly distributed again.

They're still reviewing the cvs logs though.



Posted by at 10:44 | Comments (4) | Trackbacks (0)
Tag(s): ,
Related entries by tags:
Migrating from Wordpress to Serendipity
bashing the shell
Gimp.app: Fixing Random Crashes on OS X Leopard
To the driver of WMD 6468, you are a true Malaysian asshole
Viagra 70% X-Mas special, courtesy of your friendly Anti Corruption Agency Website

Trackbacks
Trackback specific URI for this entry

No Trackbacks

Comments
Display comments as (Linear | Threaded)

Server: Apache/1.3.33 (Debian GNU/Linux) mod_python/2.7.8 Python/2.3.2 mod_gzip/1.3.26.1a PHP/4.3.10-2 mod_ssl/2.8.14 OpenSSL/0.9.7b

Hmmm... Debian.
#1 NEBTD on 2005-02-02 16:49 (Reply)
well, what is your point there nebtd?
#2 spoonfork (Homepage) on 2005-02-02 21:31 (Reply)
Looks like its quite well updated. Like those Apache and PHP. Could it be a loophole in Debian distro itself?
#3 NEBTD on 2005-02-02 22:28 (Reply)
dude it started happen approx 1 year ago.
#4 ZEO on 2005-02-03 14:26 (Reply)

Add Comment



Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA
 
 

About

This is the personal blog of Mel Mudin (spoonfork). All data and information provided on this site is for informational purposes and on an as-is basis.

This weblog does not represent the thoughts, intentions, plans or strategies of my employers. It is solely my opinion and views as a kambing biri-biri.

Feel free to challenge me, disagree with me, or even tell me that I am a kambing biri-biri wannabee in the comment section of each blog entry.

Quicksearch

Archives

August 2008
July 2008
June 2008
Recent...
Older...

Show tagged entries

Syndicate This Blog