Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Is this a security problem?

Discussion in 'Security' started by erick_paper, Jun 11, 2007.

  1. erick_paper

    erick_paper Well-Known Member

    Joined:
    Apr 19, 2005
    Messages:
    245
    Likes Received:
    0
    Trophy Points:
    166
    I suddenly have files with names like
    Code:
    C=8455
    in the webroot folder of my site (home/siteuserid/www).

    I checked the user ID who created these files, and they seem to have been created by my user ID (domain's user id). What are these files? Their length is always 0 and there's nothing inside. Is someone uploading these files? Has anyone experienced this before, and if so, how can I avoid the creation of such files? Here's an LS listing from the SSH prompt:

    Code:
    -bash-3.00$ ls C*
    14270522 -rw-r--r--  1 siteuserid siteuserid 0 Jun 11 13:00 C=8455
    14270529 -rw-r--r--  1 siteuserid siteuserid 0 Jun 11 13:00 C=8459
    
     
  2. mguindon10

    mguindon10 Active Member

    Joined:
    Aug 23, 2005
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    151
    Location:
    Detroit, MI.
    What is actually in the files that you are finding?
     
  3. erick_paper

    erick_paper Well-Known Member

    Joined:
    Apr 19, 2005
    Messages:
    245
    Likes Received:
    0
    Trophy Points:
    166

    As I mentioned, their file size is always 0 and there's nothing inside.
     
  4. erick_paper

    erick_paper Well-Known Member

    Joined:
    Apr 19, 2005
    Messages:
    245
    Likes Received:
    0
    Trophy Points:
    166
    And I got two more of these:

    Code:
    -bash-3.00$ ls anet* 2*
    14270584 -rw-r--r--  1 siteuserid siteuserid 0 Jun 11 22:51 25676a00456f0d%2fc8cc94f85cc8094ec1256e0b003b55fd%3fOpenDocument
    14270522 -rw-r--r--  1 siteuserid siteuserid 0 Jun 11 22:51 anet%2eit%2fdatabase%2femilianet%2femilianet2%2ensf%2f6ab2c64c56f0d061c1
    
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice