Server hacked ---need help!!!

[Guest_imported]

Hi guys,

We had a web server running with anonymous ftp on RH6.2. It got hacked and the IT department in my work place says that the server IP was being used to scan port 21or 23 for ftp servers. I installed apache and wu-ftp server from RH6.2. First does any1 know if there is any security loopholes in RH6.2 and associated wu-ftp and how does 1 spot if you are hacked and how to secure the server.
Many Thanks.

 

[sarm]

Hi,

I guess you have upgraded or are running the latest..

http://rhn.redhat.com/errata/RHSA-2001-157.html

Good luck.

 

[Vespasian]

Hope you flattened the server after doing a post mortem,............try OpenBSD