Thread: Log concerns
View Single Post
  #2 (permalink)  
Old 01-08-2009, 02:23 PM
wige's Avatar
wige wige is offline
Moderator
WebProWorld Moderator
 
Join Date: Jun 2006
Location: United States
Posts: 2,661
wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9
Default Re: Log concerns

Its a scan, attempting to find and exploit a zero-day vulnerability (just discovered either today or yesterday) in a system called Roundcube, a mailing system used by some web servers. If you don't have Roundcube, you are fine. Otherwise, update your installation. Now.

Go here for some additional information: http://www.webhostingtalk.com/showthread.php?p=5491823. There does not seem to be much info available right now, except that roundcube detection just got added to a lot of botnets. It is being theorized that Roundcube might be a platform that might be used to launch attacks against scripts in the /bin/ folder, to gain privileges on target servers.
__________________
The best way to learn anything, is to question everything.

Last edited by wige; 01-08-2009 at 02:29 PM.
Reply With Quote