21 reputation
4
bio website
location
age
visits member for 2 years, 5 months
seen Oct 21 '12 at 4:16

Nov
25
awarded  Popular Question
Jun
29
awarded  Supporter
Jun
20
accepted Disable Perl for some/most Linux users?
Jun
19
awarded  Scholar
Jun
19
comment Disable Perl for some/most Linux users?
OK thanks for the detailed answer I get it. Since I have been hacked twice and each time I found perl scripts in the temp directory of my server (under the one account's username) my idea was that it might make it a bit harder if the hacker only uses PERL kiddy scripts. As I said below I deleted everything from the user's directory and installed a backup that I believe is clean. Recent Apache logs did not show anything suspicious, but my server keeps logs within the user's own directory.
Jun
19
comment Disable Perl for some/most Linux users?
After the second attack I made a copy and then deleted the whole website and re-uploaded a fresh backup from way before the first attack. Hoping that any backdoor script installed on the website (not phpBB) will have been deleted as well. PHP version is 5.3.3-7+squeeze13. RFI is disabled.
Jun
19
comment Disable Perl for some/most Linux users?
... and also I cannot be sure root has been compromised (the system is up to date in regard to the official debian packages), no suspicious scripts were running under anything else but the hacked account's user.
Jun
19
comment Disable Perl for some/most Linux users?
Thanks Rook, I really appreciate being called "stupid", to be honest that's not the kind of help I was hoping for. PhpBB has been deleted from the hosting account after the first attack, I installed it some time ago to check it out really and kind of forgot about it - mistake I know. I am not an expert is security I won't lie about it, or I wouldn't be here posting basic questions - nonetheless I don't think I deserve being insulted for asking a question. The perl scripts were uploaded to the system's temp directory and executed from there. They were chrooted to the web account's user ...
Jun
18
awarded  Student
Jun
18
asked Disable Perl for some/most Linux users?