Discussion:
Delete file randomly
(too old to reply)
patguss
2009-03-26 15:00:31 UTC
Permalink
hi,
we have a probl?me with the files are deleted randomly
the directory deleted are CFIDE and folder a site
we have this message on log security

Objet ouvert
Serveur de l'objet : Security
Type de l'objet : File
Nom de l'objet : D:\Clients\Aipef\Datas\Fiches\772.html
Identificateur du handle : 15732
Identificateur de l'op?ration : {0,730424277}
Id. du processus : 8412
Nom du fichier image : D:\ColdFusion8\runtime\bin\jrun.exe
Utilisateur principal : PRESSE-WEB01$
Domaine principal : WORKGROUP
Id d'ouv. de session principale : (0x0,0x3E7)
Utilisateur du client : -
Domaine du client : -
Id. d'ouv. de session client : -
Acc?s : DELETE
ReadAttributes

Privil?ges : -
Nombre de SID restreint : 0
Masque d'acc?s : 0x10080

have you a idea for this probl?me

thank you

Patrick,
JR "Bob" Dobbs
2009-03-26 21:18:00 UTC
Permalink
Is it possible that this is the results of an injection attack? Do you have
any code that executes a CFFILE, CFDIRECTORY, or CFEXECUTE command that takes
input from a user? If the user's input is not validated it this might explain
files being deleted.

http://en.wikipedia.org/wiki/Code_injection

Loading...