FW: File Folders Own Changed

From: Faisal (faisat_private)
Date: Wed Jun 04 2003 - 20:39:53 PDT

  • Next message: John: "Dameware Malcode? Is anyone aware of it?"

    Hi,
    
    I just configured a web site on my RH7.2 box running
    apache-1.3.27-1.7.2.
    
    After defining web site about 15 minutes later I found that permissions
    and owner of the web site files are changed to something like this. 
    
    drwxrwxrwx    6 544      401          4096 Jun  3 16:29 admin
    -rwxr-xr-x    1 root     root        14604 Jun  4 11:48 admin.php
    -rwxrwxrwx    1 544      401          2039 Sep 16  2002 auth.php
    drwxr-xr-x    3 root     root         4096 Jun  4 13:14 backup
    -rwxrwxrwx    1 544      401         14976 Sep 16  2002 banners.php
    -rwxrwxrwx    1 544      401          2632 Sep 16  2002 footer.php
    -rwxrwxrwx    1 544      401          1987 Sep 16  2002 header.php
    drwxrwxrwx   14 544      401          4096 Jun  4 11:26 images
    drwxrwxrwx    2 544      401          4096 Jun  3 16:29 includes
    -rwxrwxrwx    1 544      401          2295 Sep 16  2002 index.php
    drwxrwxrwx    2 544      401          4096 Jun  4 12:01 language
    drwxrwxrwx   28 544      401          4096 Jun  4 10:48 navigation
    -rwxr-xr-x    1 root     root         4356 Jun  4 11:23 navigation.php
    -rwxrwxrwx    1 544      401           170 Sep 16  2002 robots.txt
    drwxr-xr-x    2 mysql    mysql        8192 Jun  4 13:16 sql
    
    I have no ftp server running on this box neither wu-ftp or ftpdpro.
    
    It's local company site.
    
    Any one has any idea I am feeling compromised? 
    
    Faisal Ashraf 
    
    
    ----------------------------------------------------------------------------
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Thu Jun 05 2003 - 08:39:15 PDT