From what I understand, the Gallery module in nuke has vulnerabilities in it. Someone did the same thing to one of my sites.

----- Original Message ----- From: "Evert Smit" <admin@sidhe.net> To: <suse-security@suse.com> Sent: Thursday, February 12, 2004 7:24 AM Subject: [suse-security] IRC bots with wwwrun

hi all, some guy manages to either missuse phpnuke or contenido on mysever to install his irc bots in my /tmp and var/tmp directories.

any of you know about some measaures i could take against this?

regards