Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact us.

Post New Thread Reply

Register GFY Rules Calendar
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >
ATTN: Security Alert: Cpanel Users/Owners - SERIOUS ALERT Damnit ATTN: Security Alert: Cpanel Users/Owners - SERIOUS ALERT Damnit
Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed.

 
Thread Tools
Old 09-23-2006, 02:41 PM   #1
Adult Warden
So Fucking Banned
 
Join Date: Jul 2006
Location: Orlando, FL
Posts: 1,822
ATTN: Security Alert: Cpanel Users/Owners - SERIOUS ALERT Damnit
Aight...Word just came in about a new exploit for Cpanel (go figure)

Looks like there's a root exploit out for cPanel servers

Very serious: Gives attackers full root access, will not show up in rootkit checks. Many of your machines may already be affected.

Official word from Cpanel: "This has been confirmed and patched. Running /scripts/upcp will fix the vulnerability in all builds. Please note that this is a local exploit which requires access to a cPanel account.

Please send information such as this to [email protected] to make us aware. The first communication we received was at 2:15pm CST. If you believe you have been exploited through this vulnerability, you are welcome to submit a support request for assistance. (https://tickets.cpanel.net/submit/in...eqtype=tickets)"

Reference: http://www.webhostingtalk.com/showthread.php?t=549457

DO NOT IGNORE THIS WARNING!
Adult Warden is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 02:43 PM   #2
Ice
Confirmed User
 
Ice's Avatar
 
Join Date: Nov 2002
Location: Sunny California
Posts: 26,053
wheeeew got in before squishypimp
__________________
icq 1904905
Ice is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 02:45 PM   #3
Adult Warden
So Fucking Banned
 
Join Date: Jul 2006
Location: Orlando, FL
Posts: 1,822
Quote:
Originally Posted by Ice
wheeeew got in before squishypimp
Adult Warden is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 02:48 PM   #4
spasmo
Confirmed User
 
Join Date: Dec 2005
Location: Couch
Posts: 2,678
If you're actually running a web-based admin tool, at the very least put .htaccess or AuthCookie in front of it.

__________________

Surfers: Go here for hot babes.
spasmo is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 02:49 PM   #5
tranza
ICQ: 197-556-237
 
Join Date: Jun 2003
Location: BRASIL !!!
Posts: 57,559
Should I warn Webair?
__________________
I'm just a newbie.
tranza is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 02:50 PM   #6
the alchemist
Confirmed User
 
the alchemist's Avatar
 
Industry Role:
Join Date: Dec 2004
Location: Montreal, Canada
Posts: 3,271
People still use that crap?
__________________
264 349 400
the alchemist is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 02:57 PM   #7
Adult Warden
So Fucking Banned
 
Join Date: Jul 2006
Location: Orlando, FL
Posts: 1,822
Quote:
Originally Posted by tranza
Should I warn Webair?
I don't have them on my icq list...So yeah
Adult Warden is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 02:58 PM   #8
spasmo
Confirmed User
 
Join Date: Dec 2005
Location: Couch
Posts: 2,678
Quote:
Originally Posted by the alchemist
People still use that crap?
Why do it the right way when you can point and click?
__________________

Surfers: Go here for hot babes.
spasmo is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 03:00 PM   #9
squishypimp
PostMaster General
 
Join Date: Aug 2006
Posts: 10,781
Quote:
Originally Posted by Ice
wheeeew got in before squishypimp
lol how did i miss this one??????
__________________
squishypimp is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 03:00 PM   #10
Sparks
Confirmed User
 
Join Date: Nov 2004
Location: Southern CA
Posts: 2,466
Quote:
Originally Posted by tranza
Should I warn Webair?
Webair uses their own custom panel.

Thanks for the heads up Adult Warden, I have Cpanel on a few of my boxes right now. Going to fix it now!
Sparks is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 03:07 PM   #11
Adult Warden
So Fucking Banned
 
Join Date: Jul 2006
Location: Orlando, FL
Posts: 1,822
Quote:
Originally Posted by Sparks
Webair uses their own custom panel.

Thanks for the heads up Adult Warden, I have Cpanel on a few of my boxes right now. Going to fix it now!
Even if they mostly use their own panel...Some will request cpanel...As its widely known and user friendly...
Adult Warden is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 03:13 PM   #12
com
Confirmed User
 
Join Date: Aug 2003
Location: Portland, Oregon
Posts: 4,541
this is why i love admin panels
__________________

Real. Professional. Hosting.
.:Expect Nothing Less:.
320-078-843 :: www.realprohosting.com :: [email protected]
com is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 03:22 PM   #13
chaze
Confirmed User
 
Industry Role:
Join Date: Aug 2002
Posts: 9,752
Quote:
Originally Posted by Adult Warden

Quick draw
chaze is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 03:24 PM   #14
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
admin panels are great for virtual hosting - giving each virtual host their own web panel to adminsiter their domain. But I draw the line at a cp where you have to enter your root password like cPanel to administer a server, like WHM in the cPanel bundle. What's wrong with the CLI?
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)


All models are wrong, but some are useful. George E.P. Box. p202
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 03:28 PM   #15
spasmo
Confirmed User
 
Join Date: Dec 2005
Location: Couch
Posts: 2,678
Quote:
Originally Posted by borked
What's wrong with the CLI?
Learning curve.
__________________

Surfers: Go here for hot babes.
spasmo is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 03:44 PM   #16
woj
<&(©¿©)&>
 
woj's Avatar
 
Industry Role:
Join Date: Jul 2002
Location: Chicago
Posts: 47,882
Quote:
Originally Posted by Ice
wheeeew got in before squishypimp
__________________
Custom Software Development, email: woj#at#wojfun#.#com to discuss details or skype: wojl2000 or gchat: wojfun or telegram: wojl2000
Affiliate program tools: Hosted Galleries Manager Banner Manager Video Manager
Wordpress Affiliate Plugin Pic/Movie of the Day Fansign Generator Zip Manager
woj is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 04:38 PM   #17
Adult Warden
So Fucking Banned
 
Join Date: Jul 2006
Location: Orlando, FL
Posts: 1,822
Bump For Alert
Adult Warden is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 07:53 PM   #18
Adult Warden
So Fucking Banned
 
Join Date: Jul 2006
Location: Orlando, FL
Posts: 1,822
Another bump...Help me keep this bumped so people know and protect their shit
Adult Warden is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 07:56 PM   #19
fallenmuffin
Confirmed User
 
fallenmuffin's Avatar
 
Industry Role:
Join Date: Nov 2005
Posts: 8,170
Everythough it's at the top...

BUMP! for Adult Warden oh and security
fallenmuffin is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 09-23-2006, 10:49 PM   #20
kacy
Confirmed User
 
kacy's Avatar
 
Join Date: Oct 2002
Location: So Cal
Posts: 877
And yet another reason why Naked Hosting does NOT use cpanel ;)
__________________
~Kacy
kacy is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Post New Thread Reply
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >
ATTN: Security Alert: Cpanel Users/Owners - SERIOUS ALERT Damnit ATTN: Security Alert: Cpanel Users/Owners - SERIOUS ALERT Damnit
« Previous Thread | Next Thread »

Bookmarks



Advertising inquiries - marketing at gfy dot com

Contact Admin - Advertise - GFY Rules - Top

©2000-, AI Media Network Inc



Powered by vBulletin
Copyright © 2000- Jelsoft Enterprises Limited.