iPL Site Hacked

On July 1st the Linux on iPod wiki was hacked. The timing was horrible because Veteran was/is on vacation and I had no OS installed on my computer. I think the hacker gained access through the wiki because an exploit patch was released in my absense. I fixed the wiki right away but later it turned out that Subseven was installed and our forums had been patched with some old version of a worm that was infecting our users using IE. I really don’t know much about security and since I don’t have shell access to the server (only ftp to the apache root folder) it’s hard for me to prevent attacks. I can’t view system logs or anything. I do my best but I can’t help but feel that this successful hack was my fault. I’m still hoping that when we look at the logs it reveales that the hacker didn’t even gain access through the http server but instead rooted the server or something via some other service.

    None Found