Forum Moderators: coopster & phranque

Message Too Old, No Replies

Unknown two line file

What is it?

         

D_Blackwell

12:16 am on Dec 16, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



#!/usr/bin/perl
$string=`du -h /home/domainusername/`;
print "Content-type: text/plain\n\n$string";

A file, du.pl showed up in the root directory. It has never been there before, and I didn't knowingly put it there. What is it? Should I do anything with it? ('domainusername' is the username of the domain.)

coopster

2:27 pm on Dec 16, 2005 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



Well, the unix du command will summarize disk usage of each file, recursively for directories. That -h switch says to print the sizes in human readable format (i.e. 1K 76M 2G).

If you didn't put that perl script there, you might want to find out who did and why they want to view your home directory listing!

D_Blackwell

11:04 pm on Dec 16, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I've deleted the file from the server, though kept a copy for myself, and changed the password. The only other person that should have access is the owner of the company, and he would never do anything like that. I'm at a loss as to how it got there, but upload files all the time, so the addition jumped out at me. As a security matter, what should my primary concerns be at this point?

coopster

11:38 pm on Dec 16, 2005 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



Did you happen to look at the owner/group of the file before you deleted it?

I get lots of hits for "kommander" when I search on that string ... you ever use that open source software and inadvertently use demo examples and somehow store a file in your root?