Community Forums
Connect with us on LinkedIn
Community Notice
+ Reply to Thread
Page 2 of 2 FirstFirst 1 2
Results 16 to 17 of 17
  1. #16
    Member bvierra's Avatar
    Join Date
    Jul 2006
    Location
    Southern California
    Posts
    55

    Default

    most of the attacks are from exploits in software on the server, not from hacking of ftp passwords.

    SFTP is a good idea as it is more secure. However it is not an end all

  2. #17
    Registered User
    Join Date
    Oct 2009
    Posts
    1

    Default

    bvierra - funny you should say that - I go to this post searching for ways to secure the connection for the very reason you mention. But I understood from all of my study of the exploit - sometimes referred to as the "GUMBLAR" virus - that they finally found it to end up creating a node on your network that could sniff clear text ftp packets. So encrypting the packets would take care of that it would seem.

    I would very much appreciate any info you have on it - I had 3 website hacked with that iframe upload deal through a virus on one of my team's computers, and it's clear that the ftp user/pswd was compromised.

Similar Threads & Tags
Similar threads

  1. WHM Shell > SCP/SFTP only ?
    By chrismfz in forum Feature Requests for cPanel/WHM
    Replies: 1
    Last Post: 08-28-2011, 11:19 AM
  2. Can I allow SFTP without Shell?
    By BraveX in forum cPanel and WHM Discussions
    Replies: 3
    Last Post: 02-23-2009, 01:32 PM
  3. Sorry, the shell, Enable Normal Shell does not exist!
    By 4u123 in forum cPanel and WHM Discussions
    Replies: 4
    Last Post: 06-15-2007, 08:05 AM
  4. sftp not working with shell access disabled
    By gator in forum cPanel and WHM Discussions
    Replies: 6
    Last Post: 08-31-2005, 10:12 PM
  5. jailed shell access - how does it differ from normal shell?
    By spaceman in forum cPanel and WHM Discussions
    Replies: 1
    Last Post: 08-04-2004, 12:08 PM
Linkedin       Facebook       Twitter       RSS       Flickr       YouTube