31 Oct
2003
31 Oct
'03
10:23 a.m.
On 30/10/03 22:33 +0530, Tushar Burman wrote:
Here's how it goes: Several of my servers have been compromised by worms at some point or other. I haven't had the time to do a complete post-mortem, but most seem to exploit SSH or Apache vulnerabilities. I've managed to clean up most without a complete reinstall (thank you apt-get!) but a few, including the most recent, don't seem to want to behave.
So backup your data, format, reinstall, patch, restore data, bring online. Keep the boxes patched. You don't know what else has gone on the system.
Devdas Bhagat