I host files on a shared server with Ubuntu 14.04. How does a hacker get access to my files if he got access to another user's files and how do I prevent it?

closed as too broad by forest, Overmind, Steffen Ullrich, Teun Vink, vidarlo Apr 15 at 10:06

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • Your question is too general. What OS does the server use ? – Overmind Apr 15 at 6:26
  • @Overmind I updated the post – Brutus Cruciatus Apr 15 at 6:52
  • See this vulnerability list for 14.04: usn.ubuntu.com/releases/ubuntu-14.04-lts – Overmind Apr 15 at 7:02
  • 2
    You're basically asking us to make a forensic investigation without any access to your system. It's akin to telling a doctor "My wife is at home and she's sick. What medicine should I give her?" – MechMK1 Apr 15 at 8:26

It's all about privileges.

No matter what operating system you are refering to. The way to access a certain file path on a server is through privileges assigned to server users.

A user can share access privileges with other users to access certain files, but if an user doesn't have privileges to access that path, he can reach privileges by a technique called privilege scalation exploiting server's vulnerabilities, giving him or her access to routes that are not authorized for that user.

  • In short, if the admin of the main server does his job properly, I don't have to care about what other users on the same server do. – Brutus Cruciatus Apr 15 at 8:03
  • That is technically true. – Cristian Urrutia Apr 15 at 8:05

There are 2 options either the attacker managed to gain privilege access to the host of the service and can see everything or the files have the wrong security permissions.

Not the answer you're looking for? Browse other questions tagged or ask your own question.