MySQL Forums
Forum List  »  Newbie

Migrate databases from hacked server
Posted by: Richard Rose
Date: April 20, 2017 12:39PM

My vps was hacked and the owner was changed to r00t. I was able to connect via ssh and edited /etc/passwd to restore access and successfully copied much of the web sites content except the databases. /usr/bin is owned by my admin user name, nospvs, and I cannot change the owner and group to root. For a while, I had root access and can still cd into all directories.

When I execute the suggested migration command, this is the result:
[nosvps@s132-148-19-193 /]$ mysqldump -u nosvps -p /var/lib/mysql/atlnaacp_db \| mysql -h 192.169.215.15 /var/lib/mysql/atlnaacp_db
Enter password:
mysqldump: Got error: 1045: Access denied for user 'nosvps'@'ip-132-148-19-193.ip.secureserver.net' (using password: YES) when trying to connect
[nosvps@s132-148-19-193 /]$ mysqldump -u nosvps -p /var/lib/mysql/atlnaacp_db \| mysql -h 192.169.215.15 /var/lib/mysql/atlnaacp_db
Enter password:
mysqldump: Got error: 1045: Access denied for user 'nosvps'@'ip-132-148-19-193.ip.secureserver.net' (using password: YES) when trying to connect
[nosvps@s132-148-19-193 /]$ mysqldump -u nosvps -p /var/lib/mysql/atlnaacp_db \| mysql -h 192.169.215.15 /var/lib/mysql/atlnaacp_db
Enter password:
mysqldump: Got error: 1045: Access denied for user 'nosvps'@'ip-132-148-19-193.ip.secureserver.net' (using password: YES) when trying to connect
[nosvps@s132-148-19-193 /]$ effective uid is not 0, is sudo installed setuid root?

Can you offer some help to resolve?

Options: ReplyQuote




Sorry, you can't reply to this topic. It has been closed.

Content reproduced on this site is the property of the respective copyright holders. It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.