ATTN: Security Alert: Cpanel Users/Owners - SERIOUS ALERT Damnit

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Adult Warden
    So Fucking Banned
    • Jul 2006
    • 1822

    #1

    ATTN: Security Alert: Cpanel Users/Owners - SERIOUS ALERT Damnit

    Aight...Word just came in about a new exploit for Cpanel (go figure)

    Looks like there's a root exploit out for cPanel servers

    Very serious: Gives attackers full root access, will not show up in rootkit checks. Many of your machines may already be affected.

    Official word from Cpanel: "This has been confirmed and patched. Running /scripts/upcp will fix the vulnerability in all builds. Please note that this is a local exploit which requires access to a cPanel account.

    Please send information such as this to [email protected] to make us aware. The first communication we received was at 2:15pm CST. If you believe you have been exploited through this vulnerability, you are welcome to submit a support request for assistance. (https://tickets.cpanel.net/submit/in...eqtype=tickets)"

    Reference: http://www.webhostingtalk.com/showthread.php?t=549457

    DO NOT IGNORE THIS WARNING!
  • Ice
    Confirmed User
    • Nov 2002
    • 26053

    #2
    wheeeew got in before squishypimp
    icq 1904905

    Comment

    • Adult Warden
      So Fucking Banned
      • Jul 2006
      • 1822

      #3
      Originally posted by Ice
      wheeeew got in before squishypimp

      Comment

      • spasmo
        Confirmed User
        • Dec 2005
        • 2678

        #4
        If you're actually running a web-based admin tool, at the very least put .htaccess or AuthCookie in front of it.


        Surfers: Go here for hot babes.

        Comment

        • tranza
          ICQ: 197-556-237
          • Jun 2003
          • 57559

          #5
          Should I warn Webair?
          I'm just a newbie.

          Comment

          • the alchemist
            Confirmed User
            • Dec 2004
            • 3271

            #6
            People still use that crap?
            264 349 400

            Comment

            • Adult Warden
              So Fucking Banned
              • Jul 2006
              • 1822

              #7
              Originally posted by tranza
              Should I warn Webair?
              I don't have them on my icq list...So yeah

              Comment

              • spasmo
                Confirmed User
                • Dec 2005
                • 2678

                #8
                Originally posted by the alchemist
                People still use that crap?
                Why do it the right way when you can point and click?

                Surfers: Go here for hot babes.

                Comment

                • squishypimp
                  PostMaster General
                  • Aug 2006
                  • 10781

                  #9
                  Originally posted by Ice
                  wheeeew got in before squishypimp
                  lol how did i miss this one??????

                  Comment

                  • Sparks
                    Confirmed User
                    • Nov 2004
                    • 2466

                    #10
                    Originally posted by tranza
                    Should I warn Webair?
                    Webair uses their own custom panel.

                    Thanks for the heads up Adult Warden, I have Cpanel on a few of my boxes right now. Going to fix it now!

                    Comment

                    • Adult Warden
                      So Fucking Banned
                      • Jul 2006
                      • 1822

                      #11
                      Originally posted by Sparks
                      Webair uses their own custom panel.

                      Thanks for the heads up Adult Warden, I have Cpanel on a few of my boxes right now. Going to fix it now!
                      Even if they mostly use their own panel...Some will request cpanel...As its widely known and user friendly...

                      Comment

                      • com
                        Confirmed User
                        • Aug 2003
                        • 4541

                        #12
                        this is why i love admin panels

                        Real. Professional. Hosting.
                        .:Expect Nothing Less:.
                        320-078-843 :: www.realprohosting.com :: [email protected]

                        Comment

                        • chaze
                          Confirmed User
                          • Aug 2002
                          • 9776

                          #13
                          Originally posted by Adult Warden

                          Quick draw
                          Like the desert needs the rain
                          We do fully manged WordPress, VPS, and Servers. Adult Host Pro https://adulthostpro.com/ Since 2001

                          Comment

                          • borked
                            Totally Borked
                            • Feb 2005
                            • 6284

                            #14
                            admin panels are great for virtual hosting - giving each virtual host their own web panel to adminsiter their domain. But I draw the line at a cp where you have to enter your root password like cPanel to administer a server, like WHM in the cPanel bundle. What's wrong with the CLI?

                            For coding work - hit me up on andy // borkedcoder // com
                            (consider figuring out the email as test #1)



                            All models are wrong, but some are useful. George E.P. Box. p202

                            Comment

                            • spasmo
                              Confirmed User
                              • Dec 2005
                              • 2678

                              #15
                              Originally posted by borked
                              What's wrong with the CLI?
                              Learning curve.

                              Surfers: Go here for hot babes.

                              Comment

                              • woj
                                <&(©¿©)&>
                                • Jul 2002
                                • 47880

                                #16
                                Originally posted by Ice
                                wheeeew got in before squishypimp
                                Custom Software Development, email: woj#at#wojfun#.#com to discuss details or skype: wojl2000 or gchat: wojfun or telegram: wojl2000
                                Affiliate program tools: Hosted Galleries Manager Banner Manager Video Manager
                                Wordpress Affiliate Plugin Pic/Movie of the Day Fansign Generator Zip Manager

                                Comment

                                • Adult Warden
                                  So Fucking Banned
                                  • Jul 2006
                                  • 1822

                                  #17
                                  Bump For Alert

                                  Comment

                                  • Adult Warden
                                    So Fucking Banned
                                    • Jul 2006
                                    • 1822

                                    #18
                                    Another bump...Help me keep this bumped so people know and protect their shit

                                    Comment

                                    • fallenmuffin
                                      Confirmed User
                                      • Nov 2005
                                      • 8170

                                      #19
                                      Everythough it's at the top...

                                      BUMP! for Adult Warden oh and security

                                      Comment

                                      • kacy
                                        Confirmed User
                                        • Oct 2002
                                        • 877

                                        #20
                                        And yet another reason why Naked Hosting does NOT use cpanel ;)
                                        ~Kacy

                                        Comment

                                        Working...