2

I've patched my servers, but I'd also like to review my logs to see if there have been any compromises on them. Are there any consistent traces of exploits using this bug?

bwDraco
  • 46,683
Tom Damon
  • 466

1 Answers1

2

I caught some hits in the logs with:

grep -r '"()' /var/log/httpd/
grep -r "'()" /var/log/httpd/
Darren
  • 316
  • 2
  • 5