The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Is this a security problem?

Discussion in 'Security' started by erick_paper, Jun 11, 2007.

  1. erick_paper

    erick_paper Well-Known Member

    Joined:
    Apr 19, 2005
    Messages:
    245
    Likes Received:
    0
    Trophy Points:
    16
    I suddenly have files with names like
    Code:
    C=8455
    in the webroot folder of my site (home/siteuserid/www).

    I checked the user ID who created these files, and they seem to have been created by my user ID (domain's user id). What are these files? Their length is always 0 and there's nothing inside. Is someone uploading these files? Has anyone experienced this before, and if so, how can I avoid the creation of such files? Here's an LS listing from the SSH prompt:

    Code:
    -bash-3.00$ ls C*
    14270522 -rw-r--r--  1 siteuserid siteuserid 0 Jun 11 13:00 C=8455
    14270529 -rw-r--r--  1 siteuserid siteuserid 0 Jun 11 13:00 C=8459
    
     
  2. mguindon10

    mguindon10 Active Member

    Joined:
    Aug 23, 2005
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Detroit, MI.
    What is actually in the files that you are finding?
     
  3. erick_paper

    erick_paper Well-Known Member

    Joined:
    Apr 19, 2005
    Messages:
    245
    Likes Received:
    0
    Trophy Points:
    16

    As I mentioned, their file size is always 0 and there's nothing inside.
     
  4. erick_paper

    erick_paper Well-Known Member

    Joined:
    Apr 19, 2005
    Messages:
    245
    Likes Received:
    0
    Trophy Points:
    16
    And I got two more of these:

    Code:
    -bash-3.00$ ls anet* 2*
    14270584 -rw-r--r--  1 siteuserid siteuserid 0 Jun 11 22:51 25676a00456f0d%2fc8cc94f85cc8094ec1256e0b003b55fd%3fOpenDocument
    14270522 -rw-r--r--  1 siteuserid siteuserid 0 Jun 11 22:51 anet%2eit%2fdatabase%2femilianet%2femilianet2%2ensf%2f6ab2c64c56f0d061c1
    
     
Loading...

Share This Page