webserver hacked

Giganews Newsgroups
Subject: webserver hacked
Posted by:  PV (…@discussions.microsoft.com)
Date: Sun, 15 Jul 2007

Hi,

I run a server with windows 2000 server.

Today, all the sites were "hacked".

Probably someone run a script that on all "folders" on webserver
copy/changed the default web page.
default.asp .cfm .htm .html .php
index.asp .cfm .htm .html .php

I didnt have all security patchs installed, i just installed them. Due
firewall thing it doesnt do the updates automatic, i must do it manually.
I delete afected folders and repost the backups i had.

Everything running ok now.

I think the flaw used was kb928366 from .net framework 1.1 - 10/07/2007 - i
didnt have this one and some others also.
Could i be right about the flaw used?

If it happens again, how, or who, i can contact from microsoft?

thk,
PV

Replies