Re: Group permissions changed

From: joop gerritse (jjge_at_xs4all.nl)
Date: 09/29/05

  • Next message: Glynn Clements: "Re: Group permissions changed" 
    To: focus-linux@securityfocus.com
Date: Thu, 29 Sep 2005 21:43:03 +0200

    On Wednesday 28 September 2005 20:33, sf_submit@yahoo.com wrote:
    > I posted this before on the security basics, but haven't recieved a
    > response, and it worries me a bit, so I'm sending this to a few other
    > groups in hopes that someone will have an idea about it.
    >
    > ---
    >
    > Fairly recently I noticed my ftp client wouldn't list files in certain
    > directories on my server anymore - so I ssh'd in (it's dedicated), and did
    > a ls -aFl on the files, hoping to see what the problem was - here are a few
    > of the results:
    >
    > -rw-r--r-- 1 larry 503 371 2005-02-25 08:36 head.php
    > -rw-r--r-- 1 larry 48 873 2005-09-09 03:23 foot.php
    >
    > I never set the group ids to 503 or 48, so I checked just to make sure -
    > and no groups with those ids even exist. Is there an exploit/tool that
    > causes this, and should I be worried?

    I seem to remember that tar preserves group numbers when unpacking an archive,
    but I cannot check it right now. 

    -- 
Joop Gerritse
Mühlenstraße 11
D-47546 Kalkar-Wissel
Germany
+49 2824 971487
http://www.jjge.nl
  • Next message: Glynn Clements: "Re: Group permissions changed"

    Relevant Pages

    • Re: Group permissions changed
      ... > I posted this before on the security basics, but haven't recieved a response, and it worries me a bit, so I'm sending this to a few other groups in hopes that someone will have an idea about it. ... 503 and 48 has rights only no need to worry. ...
      (Focus-Linux)
    • Re: Help a stranded Platypus
      ... I'd actually intended to post this to ukrm, ... impressed with the quick response here. ... No worries. ... Jumpstart duly provided by what appeared to be an untidy clump of long black ...
      (uk.rec.motorcycles.classic)
    • Re: Best Kept Secrets
      ... The more I think about it the more it worries me. ... I'm glad I did go through old posts and that I ... >> get a response from this person in regards to my own question! ...
      (alt.computer.security)
    • Re: Best Kept Secrets
      ... The more I think about it the more it worries me. ... I'm glad I did go through old posts and that I ... >> get a response from this person in regards to my own question! ...
      (microsoft.public.security)
    • Re: OT: Chew on this for the weekend
      ... it is quite telling that this is the totality of your ... response to my previous post ... no worries, you'll soon overcome the cognitive dissonance that you are ... ...and ACTUALLY building a bomb. ...
      (rec.gambling.poker)