site hacked, host blames 'mambo' but i'm not sure. . . - Joomla! Forum - community, help and support

-

i visited 1 of sites find account "suspended".  hosts response critical ticket this:
it appears account taken offline sending udp floods.
have been keeping software date on account? e.g. mambo?

from can see mambo exploited , ' dc.pl' file uploaded. file used initiate attacks
against several other networks account. due intense amount being used took our server offline temporarily well.

feel free explain!


now, thing can blame on myself register globals , register globals emulation left on.  have 4 or 5 other sites hosted in sub directories / domains , lowest joomla version 1.0.11.  week ago or deleted last mambo install left on while ago couldn't 'mambo'.

there drupal install somewhere account of friend, has access subdirectory i'm not sure base public_html or not.

my question this:  exploit joomla , upload file or host finding else blame poor server security on part? mean really, upload pearl script though joomla , run it?!?!?!  seams little far fetched me maybe i'm out of touch can accomplished these days. 

thoughts , comments?

installed components on base site:
badwords2 filter  1.0 b 
banners 1.0.0
bsq sitestats 2.2.2
community builder 1.0.1
easybook 1.1
google maps 2.6
jce admin 1.0.4
joomlaboard forum 1.1.2 stable
joomlalib 1.2.2 beta
mass mail 4.5.1
news feeds 1.0.0
opensef 2.0.0-rc5_sp2
polls  
syndicate 1.0.0
web links 1.0.0



mysql support enabled
mysql client api version 4.1.21
php version 4.4.4
joomla! register globals emulation:  off 
register globals: on (tried turning off breaks site completely)
magic quotes: on
safe mode: off
file uploads: on
session auto start: off
session save path: /tmp
short open tags: on
output buffering: off
open basedir: none
display errors: on
xml enabled: yes
zlib enabled: yes
disabled functions: none

like magic 8 ball, indications point yes

yes fault.

all of applications listed 'break' rg turned on have had updated versions released fix them operate in environment.

you dont mention having implemented joomla 1.011 htaccess rules.

you dont mention having turned off f_urlopen (which allows file injection register globals points to)

session save path:    /tmp <--- no no.. should set path out of webspace  and  accessible localhost.
as matter of fact, not set tempdir /tmp.

the reason is, on shared environment, may readable others , process doesnt expose web may dump plain text or serialized memory data in /tmp, readily mined others





Comments

Post a Comment

Popular posts from this blog

invalid use of void expresion in FlexiTimer2 library

-
Image
hello, first post asking in forum patient if dont correctly   well, im trying make robot evades obstacles , uses interrupts in order distances. ive used flexitimer2 run void function each 5ms, problem whe try verify program says me there error in use of flexitimer.    code: [select] flexitimer2::set(1, 1.0/1000, rastreodistanciamin()); i copy code below, please can tell error , how solve it, ive been loking dont know do. thank you code: [select] #include <flexitimer2.h> #include <servo.h> //motor a int ena = 7; int in1=6; int in2 = 5; //motor b int in3=11; int in4=10; int enb=9; servo cabeza; //hc-sr04 device int echo = 13; int triger = 12; //it use hc-sr04 determine , return distance in front of him int calculodistancia(){   volatile int tiempo;   volatile int distancia;   digitalwrite(triger,low); /* por cuestión de estabilización del sensor*/   delaymicroseconds(5);   digitalwrite(triger, high); /* envío del pulso ultrasónico*/   delaymicroseconds(10);   tiem
Read more

error: a function-definition is not allowed here before '{' token

-
i'm new member. me pls code: [select] void manhinh1(){                              tempc = analogread(adc);   tempc = tempc * 0.48828125;                                          lcd.setcursor(0, 0); lcd.print("nhiet: ");                                      lcd.setcursor(7, 0); lcd.print(tempc);   lcd.setcursor(13,0); lcd.print((char)223);    lcd.setcursor(14,0); lcd.print("c");   if(max > min){     if (tempc > max)            {digitalwrite(fan, low);           lcd.setcursor(2, 1); lcd.print("lam mat.....");}     else if (tempc < min)           {digitalwrite(hot, low);           lcd.setcursor(2, 1); lcd.print("dang suoi...");           delay(10000); }     else if (tempc > min && tempc < max)           {digitalwrite(fan, high);            digitalwrite(hot, high);            lcd.setcursor(2, 1); lcd.print("on dinh!!");}              }    else if (max < min){    lcd.setcursor(0, 1);               
Read more

LED Strip Code

-
i downloaded code. here have several single leds flashing music microphone. in project, instead of single rgb leds, have 5 rgb led strips. need change in code? led strip 10m supernight rgb strip cut 5 equal strips. // arduino pin numbers const int do_pin = 2; const int ao_pin = 0; int sound; int led1 = 8; int led2 = 9; int led3 = 10; int led4 = 11; int led5 = 12;   void setup() {   pinmode(do_pin, input);   pinmode(led1, output);   pinmode(led2, output);   pinmode(led3, output);   pinmode(led4, output);   pinmode(led5, output);   serial.begin(9600); }   void loop() {     if (sound > 31) {     digitalwrite(led1, high);   }     if (sound < 31) {     digitalwrite(led1, low);   }     if (sound > 35) {     digitalwrite(led2, high);   }     if (sound < 35) {     digitalwrite(led2, low);   }     if (sound > 40) {     digitalwrite(led3, high);   }     if (sound < 40) {     digitalwrite(led3, low);   }     if (sound > 45) {     digitalwrite(led4, high);   }     if
Read more