ATTN: Security Alert: Cpanel Users/Owners - SERIOUS ALERT Damnit
 

Aight...Word just came in about a new exploit for Cpanel (go figure)

Looks like there's a root exploit out for cPanel servers

Very serious: Gives attackers full root access, will not show up in rootkit checks. Many of your machines may already be affected.

Official word from Cpanel: "This has been confirmed and patched. Running /scripts/upcp will fix the vulnerability in all builds. Please note that this is a local exploit which requires access to a cPanel account.

Please send information such as this to [email protected] to make us aware. The first communication we received was at 2:15pm CST. If you believe you have been exploited through this vulnerability, you are welcome to submit a support request for assistance. (https://tickets.cpanel.net/submit/in...eqtype=tickets)"

Reference: http://www.webhostingtalk.com/showthread.php?t=549457

DO NOT IGNORE THIS WARNING!

wheeeew got in before squishypimp :glugglug

:1orglaugh :1orglaugh

If you're actually running a web-based admin tool, at the very least put .htaccess or AuthCookie in front of it.

:2 cents:

Should I warn Webair?

People still use that crap? :1orglaugh

I don't have them on my icq list...So yeah

Why do it the right way when you can point and click? :1orglaugh

lol how did i miss this one??????

Webair uses their own custom panel.

Thanks for the heads up Adult Warden, I have Cpanel on a few of my boxes right now. Going to fix it now!

Even if they mostly use their own panel...Some will request cpanel...As its widely known and user friendly...

this is why i love admin panels :)

Quick draw :pimp

admin panels are great for virtual hosting - giving each virtual host their own web panel to adminsiter their domain. But I draw the line at a cp where you have to enter your root password like cPanel to administer a server, like WHM in the cPanel bundle. What's wrong with the CLI?

Learning curve.

:1orglaugh

Bump For Alert

Another bump...Help me keep this bumped so people know and protect their shit

Everythough it's at the top...

BUMP! for Adult Warden oh and security

And yet another reason why Naked Hosting does NOT use cpanel ;)