Case:
- Aegir server 2.1 on Drupal 6.31
-- Platform Hostmaster: Drupal 6.31
--- Hostmaster: ?
-- Platform 1: Drupal 7.31
--- Site 1: HACKED
--- Site 2: HACKED
-- Platform 2: Drupal 7.32
--- Site 3: ?
--- Site 4: ?
Actions:
- So the attackers get access on site 1 + site 2 using the SA-CORE-2014-005.
- Platforms 1 and sites 1 and site 2 totally deleted or restored from an old backup and then updated (files and db).
Questions:
Is there a case that the hackers gain access on Hostmaster or on sites 3 and site 4?
Or even worst… the hackers gain that level of access on the server that can compromise a new Aegir install?