Hacked on Network Solutions - Continues
Posted: 11 July 2008 06:56 PM   [ Ignore ]  
Grad Student
Avatar
Rank
Total Posts:  41
Joined  10-16-2005

This question may be related to a resolved thread.

We launched a new site 4 weeks on Network Solutions and client was reluctant to move to a new service even after we conducted a speed test and showed them our production server was 40% faster, lol.

Here is the response from Network Solutions:

“You reported an issue with links being inserted into your web pages.  This normally happens due to an insecure FTP password or having file with world write permissions on them. In your case, we found files with world write permissions on them. Please change the permissions of all files on your site so that they do not have world write. Two acceptable permission schemes are 775 or 755.  You can make this change from any FTP client, or via the File Manager in Account Manager.  We also suggest you scan your computer for viruses and spyware.  After you are sure your computer is clean we suggest you change your FTP password to something secure.  We apologize for any inconvenience.”

Network Solutions has also informed us that this is an isolated attack and that we are to blame, lol.

They are obviously blowing smoke to cover their behinds. We see thousands of new links in the index.html or index.php files as unordered lists for adult sites in every directory even though all of the directories were created as 775 or 755.

We have not encountered these problems on any of the other EE sites we have deployed.

Not sure how to stop this from happening in the future since we can’t seem to break the hold Network Solutions has on our client so any advice would be greatly appreciated.

Thanks in advance

 Signature 

Lunchbox Collective, LLC
http://www.lunchboxcollective.com


“We produce websites worth talking about.”

Profile
 
 
Posted: 11 July 2008 07:23 PM   [ Ignore ]   [ # 1 ]  
Administrator
Avatar
RankRankRankRankRankRankRank
Total Posts:  15831
Joined  06-03-2002

If directory traversal on their shared hosting servers doesn’t scare them away from them, I’m not sure anything will.  Some of the message of this user guide comment might give you some perspective that can be used to educate the client on what is wrong, and why it’s so crucial, paying close attention to the first paragraph’s comments on how directory traversal is still deadly even when files only have read access.  Bottom line, their data is just not safe in this environment.

 Signature 
Profile
MSG
 
 
   
 
 
Post Marker Legend
New Topic New posts Hot Topic Hot Topic with new posts New Poll New Poll Moved Topic Moved Topic Sticky Topic Sticky topic
Old Topic No new posts Hot Old Topic Hot Topic with no new posts Old Poll Old Poll Closed Topic Closed Topic Announcement Announcements
Theme
Change Theme
Visitor Statistics
The most visitors ever was 1149, on July 16, 2007 09:33 AM
Total Registered Members: 64935 Total Logged-in Users: 54
Total Topics: 81900 Total Anonymous Users: 31
Total Replies: 440273 Total Guests: 264
Total Posts: 522173    
Members ( View Memberlist )