On: Redis Turns 10 – How it started with a single post...

[Gigablah]

Only problem I ever encountered was mainly my fault -- my Redis instance was used to hack my server (the attacker manipulated Redis data and dumped it to overwrite /etc/passwd, etc). I was an idiot and hadn't locked down my installation. Luckily my provider had disk snapshots.

[HeadlessChild → Gigablah]

Yup, same thing happen to my VPS. I had redis running on a tcp port instead of a unix socket and I didn't have a firewall setup.

[tpetry → Gigablah]

Sounds interesting. Can you share how and what happened in detail?

[Gigablah → tpetry]

There's actually a writeup of this technique on the Redis blog: http://antirez.com/news/96

In my case they overwrote ~/.ssh/authorized_keys, /etc/group and /etc/passwd as well.