I host files on a shared server with Ubuntu 14.04. How does a hacker get access to my files if he got access to another user's files and how do I prevent it?

  • Your question is too general. What OS does the server use ? – Overmind Apr 15 '19 at 6:26
  • @Overmind I updated the post – Brutus Cruciatus Apr 15 '19 at 6:52
  • See this vulnerability list for 14.04: usn.ubuntu.com/releases/ubuntu-14.04-lts – Overmind Apr 15 '19 at 7:02
  • 2
    You're basically asking us to make a forensic investigation without any access to your system. It's akin to telling a doctor "My wife is at home and she's sick. What medicine should I give her?" – MechMK1 Apr 15 '19 at 8:26

It's all about privileges.

No matter what operating system you are refering to. The way to access a certain file path on a server is through privileges assigned to server users.

A user can share access privileges with other users to access certain files, but if an user doesn't have privileges to access that path, he can reach privileges by a technique called privilege scalation exploiting server's vulnerabilities, giving him or her access to routes that are not authorized for that user.

| improve this answer | |
  • In short, if the admin of the main server does his job properly, I don't have to care about what other users on the same server do. – Brutus Cruciatus Apr 15 '19 at 8:03
  • That is technically true. – Cristian Urrutia Apr 15 '19 at 8:05

There are 2 options either the attacker managed to gain privilege access to the host of the service and can see everything or the files have the wrong security permissions.

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.