account_page.php overwritten
Posted: 01 Mar 2006, 01:04
I'm running Mantis 1.0.0 on Linux (RHEL 4) with Apache 2.0.52 and PHP 4.3.9. I'm the only person using the system at the moment, as we're evaluating it for use. I installed the import add-on (http://www.mantisbt.org/mantis/view.php?id=4220) yesterday, around 7 p.m. (time is important, see below), following the instructions in the readme.
Today, I found that account_page.php had been completely overwritten with this:
This occurred at 7:01 p.m., one minute after I finished modifying files for the import tool and copied over import_issues.php and import_issues_page.php
Using grep, I found a similar problem with account_delete.php. Instead of being overwritten, though, those lines were just inserted at the head.
I've replaced the damaged files, but am not sure what happened. I can't find anything significant around that time in log files. Has anyone seen this before, or have any ideas on what caused it?
Today, I found that account_page.php had been completely overwritten with this:
Code: Select all
1141084894
64768 1818900 mantis/core/adodb/contrib
64768 1818993 mantis/core/adodb/pear/Auth
64768 1819022 mantis/core/adodb/session/old
64768 1819008 mantis/core/adodb/session
64768 1818992 mantis/core/adodb/pear
64768 1818997 mantis/core/adodb/perf
64768 1818902 mantis/core/adodb/cute_icons_for_site
64768 1818918 mantis/core/adodb/docs
64768 1819030 mantis/core/adodb/xsl
64768 1818928 mantis/core/adodb/drivers
64768 1819074 mantis/core/phpmailer/language
64768 1818994 mantis/core/adodb/pear/Auth/Container
64768 1818905 mantis/core/adodb/datadict
64768 1818883 mantis/core/adodb
64768 1818970 mantis/core/adodb/lang
64768 1819070 mantis/core/phpmailerCode: Select all
ls -l account_page.php: -rwxr-xr-x 1 apache apache 659 Feb 27 19:01 account_page.phpI've replaced the damaged files, but am not sure what happened. I can't find anything significant around that time in log files. Has anyone seen this before, or have any ideas on what caused it?