Vulnerability Question

Posted: Wed Apr 09, 2003 9:28 pm

I received this from my hosting company:

Quoting Steve <Steve@lowestpricedhosting.com>:

> Molosser Dogs
>
> Sender's Name: Steve
> Sender's Email: Steve
> Message: Hello, based on the URL of your website it apepars you may be
> vulnerable to a PHP nuke vulnerability. To verify if you are vulnerable
> you may try the following url. It is strongly suggested that you take
> PHP nuke offline untill a patch is released.

> http://www.molosserdogs.com/viewpage.php?file=/etc/passwd
>
end quote...

When I click the url above, I get this:

Warning: open_basedir restriction in effect. File is in wrong directory in /usr/local/psa/home/vhosts/molosserdogs.com/httpdocs/viewpage.php on line 38

Warning: Failed opening '/etc/passwd' for inclusion (include_path='.:') in /usr/local/psa/home/vhosts/molosserdogs.com/httpdocs/viewpage.php on line 38

Could someone decipher this for me and let me know if my site is at risk.

Thanks,

Gary

Posted: Wed Apr 09, 2003 11:28 pm

http://nukecops.com/postlite1337-viewpage.html+php