Forum OpenACS Q&A: Response to Security Issue - Can't ls as nsadmin or other none root user

This sounds like it could have been compromised. Upload a copy of sash (stand alone shell) and "su nsadmin -lc /tmp/sash".

Use the "-ls" command from sash (use "help" to see all the commands) and see what you find out.

Sash is a statically linked shell which is nice in minimal environments.