Thanks xrobau. I will look it to it more properly. Probably the exploit did something to it in order to cover his nasty calls. However, i have another * server and that CDR problem didn’t happen there. I will get a way to see how a properly table looks like.
Ok guys, this was caused by bad permissions on the /tmp directory. Mysql error log was showing an “can’t create file on /tmp” error, but only on mysqld’s startup. Still that was enough to prevent * from starting. /tmp permissions fixed, it’s ok now. BTW, the permissions were set to asterisk:asterisk.
If this was from the exploit, then how could the exploit chage to asterisk:asterisk, if it’s hasn’t root permissions?! I’m assuming the exploit only got FreePBX user (asterisk), permissions.