[dundee] Rootkits on webservers

[gordon dunlop]

Thanks for the info Andrew, here are potential solutions to prevent
visitor infections after being compromised, worth looking at. The
thing I am wondering about is the entry point, it is still all hazy
here, just conjecture rather than proof and prevention.
http://www.webmasterworld.com/apache/3550695.htm

Gordon


On 25/01/2008, Andrew Clayton <andrew at digital-domain.net> wrote:
> On Thu, 24 Jan 2008 22:37:45 +0000, Jason Cormie wrote:
>
> > Entry point undiscovered as of yet, so time to check your boxes
>
> I think it's this  http://www.securityfocus.com/news/11501 found on
> this weeks lwn.net security page which has more details on it.
>
>
> Andrew
>
>
> _______________________________________________
> dundee GNU/Linux Users Group mailing list
> dundee at lists.lug.org.uk  http://dundee.lug.org.uk
> https://mailman.lug.org.uk/mailman/listinfo/dundee
> Chat on IRC, #tlug on dundee.lug.org.uk
>