[Reddes.bvs-tech] [bvstech] RES: RES: Problema al subir fichero despues de aplicar parches de seguridad LILDBI - WEB 1.7b

[Victor Ricardo Díaz]

gracias, ya todo esta OK.

abrazos
victor
  ----- Original Message ----- 
  From: Moura, Wilson Silva (BIR) 
  To: Victor Ricardo Díaz ; Mori, Marcos (BIR) ; Marcos Luis Mori ; Bvs.technical.support at bireme.org 
  Cc: reddes.bvs-tech at listas.bireme.br 
  Sent: Tuesday, May 21, 2013 12:59 PM
  Subject: RES: [bvstech] RES: RES: Problema al subir fichero despues de aplicar parches de seguridad LILDBI - WEB 1.7b


  Hola Victor,

  Por favor, asegúrese de que los ajustes del directorio temporal en el archivo php.ini están correctos (como se muestra abajo):

  ;upload_tmp_dir =

  Esta és la configuración estándar del archivo php.ini para el directorio temporal.

  Caso ha cambiado la configuración de esta variable para un otro directorio, asegúrese se el path del directorio que se informó está correcto.

  Nota: Reinicie el servicio del web server siempre que hacer modificaciones en el archivo php.ini

  Saludos,   



  Wilson Moura 
  Analista de Sistemas
  Rede de Suporto Tecnico - RST
  Fone: +55 11 5576-9838
  BIREME/OPAS/OMS


------------------------------------------------------------------------------

  De: bvs.technical.support-bounces at listas.bireme.br [bvs.technical.support-bounces at listas.bireme.br] em nome de Victor Ricardo Díaz [victorr at infomed.sld.cu]
  Enviado: terça-feira, 30 de abril de 2013 11:22
  Para: Mori, Marcos (BIR); Marcos Luis Mori; Bvs.technical.support at bireme.org
  Assunto: [bvstech] Problema al subir fichero despues de aplicar parches de seguridad LILDBI - WEB 1.7b


  Hola a todos, despues aplicar los procedimientos de los parches de seguridad según http://wiki.reddes.bvsalud.org/index.php/LILDBI-WEB-proteccion el lildbi-web no me esta importando los ficheros ISO.

  - El lildbi-web esta instalado en Linux Debian, Apache2 y PHP Version 5.2.6-1+lenny16

  Pasos para reproducir el error:

  1 - http://lildbi.couchdb.sld.cu/lildbi/index_es.htm 

  2 - Administración de la base de datos

  3 - Entro al sistema como documentalista.

  4 - En la interfaz de Administración del documentalista entro al menu Utilitario -> Importar y en el Paso 1 al importar el .iso devuelve el sgte error:

  Diretório temporário não encontrado.

  Saludos
  Victor

  ----- Original Message ----- 
    From: Mori, Marcos (BIR) 
    To: Victor Ricardo Díaz ; Marcos Luis Mori ; Bvs.technical.support at bireme.org 
    Sent: Friday, April 19, 2013 3:30 PM
    Subject: RES: LILDBI 1.7a Hackeado


    Victor, mas esa instancia está con el patch de vulnerabilidad instalado?  


    http://wiki.reddes.bvsalud.org/index.php/LILDBI-WEB-proteccion


    Saludos, 




    Marcos Luis Mori 
    RST/MTI 
    BIREME/OPS/OMS

    ------------------------

    Mi Nuevo email: morimarc at paho.org 



    Siga-nos no twitter: https://twitter.com/ComunidadRedDes/

    Curta a nossa página: https://www.facebook.com/ComunidadRedDes




----------------------------------------------------------------------------

    De: Victor Ricardo Díaz [victorr at infomed.sld.cu]
    Enviado: terça-feira, 16 de abril de 2013 15:50
    Para: Marcos Luis Mori
    Assunto: LILDBI 1.7a Hackeado


    Hola Marco aquí te envio el reporte:

    #- Started in 2013-04-16 13:41:34 ---- 
    Yzk5c2hlbGxAY2N0ZWFtLnJ1       in line:1996  htdocs/lildbi/e/admin/files/kjm.php
    #- Started in 2013-04-16 13:42:55 ---- 
    Yzk5c2hlbGxAY2N0ZWFtLnJ1       in line:2     /srv/woody/bvs/cumed/report.txt
    Yzk5c2hlbGxAY2N0ZWFtLnJ1       in line:1996  /srv/woody/bvs/cumed/htdocs/lildbi/e/admin/files/kjm.php

    Saludos
    Victor


    IMPORTANT: This transmission is for use by the intended
    recipient and it may contain privileged, proprietary or
    confidential information. If you are not the intended
    recipient or a person responsible for delivering this
    transmission to the intended recipient, you may not
    disclose, copy or distribute this transmission or take
    any action in reliance on it. If you received this transmission
    in error, please dispose of and delete this transmission. 

    Thank you.




  IMPORTANT: This transmission is for use by the intended
  recipient and it may contain privileged, proprietary or
  confidential information. If you are not the intended
  recipient or a person responsible for delivering this
  transmission to the intended recipient, you may not
  disclose, copy or distribute this transmission or take
  any action in reliance on it. If you received this transmission
  in error, please dispose of and delete this transmission. 

  Thank you.




  IMPORTANT: This transmission is for use by the intended
  recipient and it may contain privileged, proprietary or
  confidential information. If you are not the intended
  recipient or a person responsible for delivering this
  transmission to the intended recipient, you may not
  disclose, copy or distribute this transmission or take
  any action in reliance on it. If you received this transmission
  in error, please dispose of and delete this transmission. 

  Thank you.




  IMPORTANT: This transmission is for use by the intended
  recipient and it may contain privileged, proprietary or
  confidential information. If you are not the intended
  recipient or a person responsible for delivering this
  transmission to the intended recipient, you may not
  disclose, copy or distribute this transmission or take
  any action in reliance on it. If you received this transmission
  in error, please dispose of and delete this transmission. 

  Thank you.



--

Este mensaje le ha llegado mediante el servicio de correo electronico que ofrece Infomed para respaldar el cumplimiento de las misiones del Sistema Nacional de Salud. La persona que envia este correo asume el compromiso de usar el servicio a tales fines y cumplir con las regulaciones establecidas

Infomed: http://www.sld.cu/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://listas.bireme.br/pipermail/reddes.bvs-tech/attachments/20130523/a51a16a1/attachment.html