Re: [pmwiki-users] Wiki vandalism via chgrp?

2007-08-15 Thread Ian Barton
Is it conceivable that another user on the same system (this being a shared host) could have used the chgrp command to gain access to the files? Or is chgrp pretty well locked down? Ideas welcome. Thanks! --Ben S ___ That would depend on

[pmwiki-users] Wiki vandalism via chgrp?

2007-08-14 Thread Ben Stallings
I just had a site vandalized via a new method I hadn't seen before, and the hosting service was incredulous of. The entire site's group ownership (this being a UNIX system) was changed to igsvirt. Then all of the wiki.d files (which are group writable) were overwritten with identical HTML