UBB.threads PHP Forum Software Community Forums UBB.threads 6 Version 6 Support threads 6.5.5 vulnerability

Is anybody aware of a vunerability issue with 6.5.5? Some bastard got in our board and was sending phishing mail from our site - any clues?

Thanks,
John

No vulnerabilities exist in 6.5.5 that I'm aware of. If this was an upgrade from an earlier version it's highly possible that they had exploited the old version and possibly left a backdoor. Did you recently upgrade from an older version?

Are you sure the phishing mail is coming from your site ?

Or are they just using your site name/address/whatever as their "beard" ? (Faking it.)

Rick,

Speaking of backdoors, and I hope it's ok to ask this question here instead of starting another thread...

When I upgraded, I found files on my server that I had not seen before.

Those files are...

.bash_logout
.bash_profile
.bashrc
.gtkrc
.shadow

The files just looked suspicious to me. Since I don't know what they are, I renamed all of them before I started my upgrade. I haven't had any problems.

I know they are probably just standard linux/unix files, and I am probably showing grand and undiluted ignorance here... Could these have been some sort of backdoor or rootkit ?

Those all look like standard Linux files for your server profile. You'll have a variety of . files in your home directory on the server. If you see . files within your subdirectories then it might be something to worry about unless you specifically placed them there like a .htaccess file.

Thank you Rick.