0 day cpanel exploit in wild

[erichthewebguy]

Be careful though! I just upgraded and I got several 404 errors during the upgrade process, and my cPanel is currently broken. I've got a ticket in at the support center, as well as another thread in this forum. If I get a fix, I will share it so that others who are affected can resolve it

EDIT: I am currently installing the "CURRENT" tree, update forthcoming... Also, how did I wind up up here when I replied to the original post? hahaha

[ramprage]

Everyone update your boxes now /scripts/upcp there's a 0 day exploit in the wild that gives root access to cpanel boxes. If you haven't heard the news.

rkhunter/chkrootkit do not detect it

http://it.slashdot.org/it/06/09/23/2218254.shtml

http://news.netcraft.com/archives/20...mass_hack.html


http://webhostingtalk.com/showthread.php?t=549291

[erichthewebguy]

Make sur eyou install the CURRENT tree during your upgrade.

[chirpy]

We already have a thread covering this:
http://forums.cpanel.net/showthread.php?t=58090