account_page.php overwritten

[redjen]

I'm running Mantis 1.0.0 on Linux (RHEL 4) with Apache 2.0.52 and PHP 4.3.9. I'm the only person using the system at the moment, as we're evaluating it for use. I installed the import add-on (http://www.mantisbt.org/mantis/view.php?id=4220) yesterday, around 7 p.m. (time is important, see below), following the instructions in the readme.

Today, I found that account_page.php had been completely overwritten with this:

Code: Select all

1141084894
64768 1818900 mantis/core/adodb/contrib
64768 1818993 mantis/core/adodb/pear/Auth
64768 1819022 mantis/core/adodb/session/old
64768 1819008 mantis/core/adodb/session
64768 1818992 mantis/core/adodb/pear
64768 1818997 mantis/core/adodb/perf
64768 1818902 mantis/core/adodb/cute_icons_for_site
64768 1818918 mantis/core/adodb/docs
64768 1819030 mantis/core/adodb/xsl
64768 1818928 mantis/core/adodb/drivers
64768 1819074 mantis/core/phpmailer/language
64768 1818994 mantis/core/adodb/pear/Auth/Container
64768 1818905 mantis/core/adodb/datadict
64768 1818883 mantis/core/adodb
64768 1818970 mantis/core/adodb/lang
64768 1819070 mantis/core/phpmailer

This occurred at 7:01 p.m., one minute after I finished modifying files for the import tool and copied over import_issues.php and import_issues_page.php

Code: Select all

ls -l account_page.php: -rwxr-xr-x  1 apache apache 659 Feb 27 19:01 account_page.php

Using grep, I found a similar problem with account_delete.php. Instead of being overwritten, though, those lines were just inserted at the head.

I've replaced the damaged files, but am not sure what happened. I can't find anything significant around that time in log files. Has anyone seen this before, or have any ideas on what caused it?

[vboctor]

I would assume that Mantis wouldn't have access to overwrite these files. I personally never saw this before or have seen anyone report it.

Regards,
Victor
Mantis to Go?
http://www.futureware.biz/mantisconnect/