[Mailinglist] How to Prevent Uploading Perl Script in /tmpDirectory ??

[Dino]

What do you mean you secured those directories?!!

 

  _____  

From: mailinglist-bounces at ilug-cochin.org
[mailto:mailinglist-bounces at ilug-cochin.org] On Behalf Of Ditro - BipinDas
Sent: 22 June 2007 12:37
To: mailinglist at ilug-cochin.org
Subject: [Mailinglist] How to Prevent Uploading Perl Script in /tmpDirectory
??

 

Dear  List,

I had implemented Mod Security 1.9 in a Debian 3 Server. My Apache Version
is 1.3, and log says that its working fine. I had secured my /tmp /var/tmp
/dev/shm directories. And umounted in /etc/fstab. But Yesterday,one attacker
had upload a perl script into my /tmp directory.  He is continuously
uploading scripts to that foler
Please let me know what should do prevent an intruder to uploading
Perl/Sh/Chsh scripts into the /tmp directories.

Thanks in Advance. 

-- 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://ilug-cochin.org/pipermail/mailinglist_ilug-cochin.org/attachments/20070622/12bd6d99/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 7108 bytes
Desc: not available
Url : http://ilug-cochin.org/pipermail/mailinglist_ilug-cochin.org/attachments/20070622/12bd6d99/attachment-0001.jpe