Namogofer Exploit

Backdoor hack attempt

[paulmadillo]

Has anyone ever had their system attacked by the Namogofer exploit?

As I understand it the hacker writes files into writable directories so that they can then come back and execute code on the system.

I'm finding directories riddled with namogofer.php files but so far haven't suffered from any ill effects (that I'm aware of).

A quick search helped me understand briefly what the exploit is but I don't know what to do to protect my server from future attacks.

Anyone else had this?

[dreamcatcher]

Looks like no-one has experienced this issue paulmadillo. Did you have any joy sorting this out?

dc

[paulmadillo]

As far as I can see no damage has been done and simply deleting the namogofer.php files should ensure this continues.

I may have to look at my folder permissions to ensure no more files are uploaded in future.