15 Jun
2009
15 Jun
'09
2:54 p.m.
<snip>
B .Can i conclude that the attacker came through the horde framework ( cmdshell.php) ? The horde framework was installed from the centos repo.....!!!
I don't think the horde set on CentOS is very current. I just used the tarball from the horde website, and I keep it current.