In the process of trying to figure out what happened to svr2, I have
disabled a whole lot of virtual servers, just to make sure we don' thavr
vulnerable code running. That's david.beta, alexey.beta, wwwdevel and
wwwtest. If any of those was actually in use, let me know and I'll turn
them back on.
I've also removed "twiki" because the version installed had a bug that
could be used to create just the kind of scenario we had. It's my
primjary guess on how the stuff got on the server and got executed. I'm
unsure wether this was actually used somewhere.
//Magnus