Thread: Major Exploit
View Single Post
  #199 (permalink)  
Old 09-24-2006, 06:11 PM
randomuser randomuser is offline
Registered User
 
Join Date: Jun 2005
Posts: 159
randomuser is on a distinguished road
Is this correct after running sec092406.pl ?


mysqladmin:

Code:
BEGIN {
        @INC=grep(!/(^\.|\.\.|\/\.+)/,@INC);
        unshift( @INC, "/usr/local/cpanel" );
        @INC=grep(/^(\/usr\/lib\d*\/perl|\/usr\/local\/lib\d*\/perl|\/usr\/local\/cpanel)/,@INC);
   unshift(@INC,"/usr/local/cpanel");
   @INC=grep(!/^\./,@INC);
}

edit: just built a new VDS, which has this:

Code:
BEGIN {
        @INC=grep(!/(^\.|\.\.|\/\.+)/,@INC);
        unshift( @INC, "/usr/local/cpanel" );
        @INC=grep(/^(\/usr\/lib\d*\/perl|\/usr\/local\/lib\d*\/perl|\/usr\/local\/cpanel)/,@INC);
}

both the VDS and the first server are: 10.8.2-STABLE_120


more edit: I guess I'll just have to manually remove the last 2 (original) lines from the 5 liner. arg cPanel........

Last edited by randomuser; 09-24-2006 at 06:16 PM.
Reply With Quote