Koozali.org: home of the SME Server

hacking use "apach-scan" program on my server

tim

hacking use "apach-scan" program on my server
« on: January 16, 2004, 01:26:34 PM »
I found my server "SME 5.12" dir /dev/nod  files: apach-scan, explo, core.
I think somebody get in my server and doing something.
Please how to do?
thanks

tim

adrian

Re: hacking use "apach-scan" program on my server
« Reply #1 on: January 16, 2004, 04:39:20 PM »
Hi Tim

How do you know?

Can you give us a reason why you think this is the case? Is you Sme server 5.1.2 patched up with the latest 5.1.2 patches? these will be quite old now as there will be no more patches this version of  SME (I think i am right to say that?) I think for sme 5.1.2 Update 3 was the last? not sure.   If you are Worried It might be an idea to upgrade to 5.6 with Update 5, or 6. or update to version 6 final release.

I think i am correct in saying it is considerd that 5.1.2 is now unsecure and might be ok for internal use but not as a server and gateway. I am sure there are far more people in this forum who know more on this than i do.

Best Regards

Adrian

tim

Re: hacking use "apach-scan" program on my server
« Reply #2 on: January 17, 2004, 02:05:58 AM »
i want to know what are these files used for. i know that 'apach-scan' is used for scanning servers. what are the purposes? how to prevent the hacker from entering the server again if the Sme 5.1.2 continues to be used?

Peter

Re: hacking use "apach-scan" program on my server
« Reply #3 on: January 17, 2004, 05:45:34 PM »
Tim

5.1.2 will not have anymore work done to it. Mitel have now ended support for the SME project and all Other's are devoting whatever resourses they can to Moveing to the new SME version, you can find inf on this in this forum. Its now a matter of fact that the only way for you to go is to upgrade to 5.5 or 5.6 (read this forum to choose which flavour is best for you). Or you could just keep a eye on your server security an wait for develepment from this site.

Peter