search for: defac

I think, there is a neat exploit in the phpbb2.0.8 because I found my home page defaced one dark morning. The patch for phpBB is here. http://www.phpbb.com/downloads.php The excerpt of the log is attached. I believe the link to the described exploit is here. http://secunia.com/advisories/13239 The defacement braggen page is here filter to show the exploited FreeBSD machines that...

http://wiki.rubyonrails.com/rails/show/HomePage Now sure if anyone has noticed yet, but the above page has been hacked.

Hi, I was looking around for configuration tools for compiz. I don't really need anything special, but situation seems a bit problematic at the moment: - gset-compiz: Used it in the past, website is dead. - compiztools: Never seen it, but from what I read seems ok, but website defaced and download dead - csm: doesn't work with vanilla compiz So: Is there any tool atm to set the compiz gconf options with some nice dialoges? And if it's only someone sending me the archives of gset-compiz and compiztools. -- Hanno B?ck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Ja...

Is anyone mirroring Johnny's write up on this? As fate would have it, I've finally got some time to sit down and configure a spare box to be my new mail server and Johnny's site has been defaced again. :-( Sigh....I even checked to make sure it was up this morning, drove to the office so I could do everything from the terminal and my handy dandy roadmap is gone.... Any pointers to another source would be greatly appreciated. Best regards,

...show child mailboxes. mailbox = N/A || \*: Sent Trash INBOX Drafts Junk-E-Mail Supplier mailbox = Supplier*: Supplier mailbox = Supplier/*: Supplier/Dell Supplier/VMware Supplier/? The same problem exists in `doveadm mailbox status` Regards, Pascal -- The trapper recommends today: defaced.1201301 at localdomain.org

Hi, I am trying to get dovecot working with postfix, and am coming up against this error message. I have this setting configured in the 'protocol lda' section. I am running v1.1.11 dovecot -n -c /etc/dovecot/dovecot-postfix.conf # 1.1.11: /etc/dovecot/dovecot-postfix.conf # OS: Linux 2.6.31-14-generic x86_64 Ubuntu 9.10 reiserfs log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap

...cripts, and PHP is ran as CGI, so that each process will have the uid of its owner. Launching PHP as a CGI hurts performance, but this is a server for relatively low- volume sites, and security is much more important. 2) OS Integrity. Apache is launched with biba/low(low-low) credentials. 3) Defacements should be prevented. At least processes spawned from Apache should not be able to modify any files in the system, except at designated directories in case PHP scripts or CGI programs need to write something to the disk. This is naturally done with MAC_BIBA. We launch Apache with biba/...

Centos 5.4 x64, icc hg rev 11147 log: Apr 14 01:16:17 auth: Info: mysql: Connected to 127.0.0.1 (mail) Apr 14 01:16:25 imap-login: Info: Disconnected (auth failed, 2 attempts): user=<webmaster@>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Apr 14 01:16:40 master: Error: service(auth-worker): child 8642 killed with signal 11 (core dumps disabled) Apr 14 01:16:40 auth: Error: auth

...s that the web server runs as is a security issue. i.e. if there are any security issues with httpd, or the code that runs on the sites, then without a privilege escalation the exploit would run as the apache user, which means that the exploit can write to those directories resulting at the least a defaced site or at worst the upload of a more problematic exploit. > > 2. What do you suggest ? Have as few directories/files owned by the web server process as possible. If you have an application that needs to write to a file or upload to a directory, then they do need to be owned & writea...

Hi guys, I'd like to have dovecot with sieve support, but can't find any information on how to enable the sieve/managesieve support. Does anyone can light me up on this? Thanks,

I'm using "/usr/bin/doveadm purge -A" to purge the mdboxes of my users. Unfortunately this command terminates prematurely once it reaches a defective mdbox! Is there a workaround for this? Like using doveadm to get a list of valid users and then run "doveadm purge -u" on each of those? -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstra?e 15, 81669

...ge from your logs and in the wiki <http://wiki2.dovecot.org/Pigeonhole/Sieve/Usage#Manually_Compiling_Sieve_Scripts>: To mitigate this problem, the administrator must manually pre-compile global scripts using the sievec command line tool. Regards, Pascal -- The trapper recommends today: defaced.1434318 at localdomain.org

...or this? > > Like using doveadm to get a list of valid users and then run "doveadm > purge -u" on each of those? > Are you looking for a workaround like this? for user in `doveadm user \*`; do doveadm purge -u $user; done Regards, Pascal -- The trapper recommends today: defaced.1434318 at localdomain.org

On 19/03/2015 13:35, Markus Sch?nhaber wrote: >> dumped". If I put "abort()" in the code at the point it is reporting >> then a core file is written, so there is no OS reason why a core can not >> be written. It appears to be dovecot's choice to control the child. In >> an attempt to obtain a core file I have: >> >> service imap-login {

...relevant one. Adding an arbitrary abort() to imap-login gives a > "core not dumped" message. Try this configuration: service imap-login { executable = imap-login -D } Your configuration (doveconf -n output) may be also helpfull Regards, Pascal -- The trapper recommends today: defaced.1507821 at localdomain.org

The apostrophes need to be removed from the LimitCORE example, otherwise the parameter will not be recognized: $ cat /etc/systemd/system/dovecot.service.d/service.conf [Service] #Environment='OPTIONS=-p' #LimitCORE=8192 LimitCORE=infinity -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 181 bytes Desc:

hi all, will somebody please explain the step-by-step method of configuring the network of the guest operating system.I have installed FC4 as my guest OS.IfI include vif =[''''] in the configuration file I get an error while greating new domain using that file: Using config file "/etc/xen/vm2". Error: Device 0 (vif) could not be connected. Backend device not found.

hello list hello all reader of this list how to configure my scripts sieves for the home root I encounter these errors in the logs 2010-05-19 14:14:03 deliver(root): Info: sieve runtime error: Not a bytecode file 2010-05-19 14:14:03 deliver(root): Error: sieve_execute_bytecode(/root/.dovecot.sievec) failed thanks for your advice thanks

I have some emails that I think are in the Postfix delivery queue going to Dovecot, but didn't get mapped to their alias (because I didn't have all the alias entries in when they were queued). I'm wondering if this trick would work. I have the mail being delivered to /home/mail/%Ld/%Ln/mail and am wondering if I could make a symlink at /home/mail/example.com/foo -> bar and add a

Dear All, I use postfix and dovecot (1.1.11) combo with maildir format. I would have a question about dovecot config. Can I confiugre dovecot to download mails from IMAP folders via POP3? Now, mails can be downloaded only from .INBOX. My dovecot.conf file: .... mail_location = maildir:/home/vmail/%d/%n/Maildir namespace private { separator = . prefix = INBOX. #location =