Date:  Mon, 23 Nov 2009 21:34:58 +1100
From:  David Booth <md (at mark) goulburn.net.au>
Subject:  [coba-e:16165] Re: Confused about password change...
To:  coba-e (at mark) bluequartz.org
Message-Id:  <13ff4d414bb508232cea33bbe1891416 (at mark) goulburn.net.au>
In-Reply-To:  <00b901ca6c13$0fa28cd0$2ee7a670$@com>
References:  <00b901ca6c13$0fa28cd0$2ee7a670$@com>
X-Mail-Count: 16165

On 23/11/2009, at 7:00 PM, Darrell D. Mobley wrote:> Tonight, I had a drive-by hacking on BQ machine, and after closing the => hole I went to update my passwords.>  > On one particular site that runs Joomla and vBulletin, when I went to => change the MySQL user password (they share the same user over several => databases), Apache started spewing segmentation fault errors:>  > [Mon Nov 23 02:46:51 2009] [notice] child pid 16419 exit signal > Segmentation fault (11)> The minute I changed the password back, they quit.  Even restarting => Apache wouldn$BCU(B fix the problem.  Have you ever seen this before =and > what is causing this?>The only time I saw Segmentation fault was after a rootkit attack. Disastrous!ls -l /usr/binLook for funny ownerships - other than root - this could be nasty.
	
16165_2.enriched (attatchment)(tag is disabled)