Major Exploit

[cinusik]

cpanelnick, what about mysql issue? any progress? Thanks in advance for your reply.
http://bugzilla.cpanel.net/show_bug.cgi?id=4611
Confirmed on our 20 servers and few people here on the forums and also by Dan M. on bugzilla.

[mchase]

Also, PLEASE update the ChangeLog on Layer2 more often. It makes my stomach hurt to keep running these updates and have no idea what's being changed.

[felit0]

I have a problem when running "perl sec092306.pl":

root@server [~]# perl sec092306.pl
Bareword found where operator expected at sec092306.pl line 1, near "//layer1"
(Missing operator before layer1?)
syntax error at sec092306.pl line 1, near "http:"
Execution of sec092306.pl aborted due to compilation errors.


Any ideas?

[zigzam]

I have a problem when running "perl sec092306.pl":

root@server [~]# perl sec092306.pl
Bareword found where operator expected at sec092306.pl line 1, near "//layer1"
(Missing operator before layer1?)
syntax error at sec092306.pl line 1, near "http:"
Execution of sec092306.pl aborted due to compilation errors.


Any ideas?

Same here.

[cpanelnick]

Same here.

Did you copy and paste the file in a window? Please use wget or curl.

Please use the updated one anyways. see my post above.

[felit0]

I got it to work now, initially I was using the one ending in "...306.pl" from earlier in this thread. I wget the one ending in "...406.pl" and it worked.

[.:RAIS:.]

Updated Patcher:
http://layer1.cpanel.net/installer/sec092406.pl

Updated Checker:
http://layer1.cpanel.net/installer/c...cker_092406.pl

NOTE THE DATES IN THE FILENAMES

[claudio]

Originally Posted by felit0
I have a problem when running "perl sec092306.pl":

root@server [~]# perl sec092306.pl
Bareword found where operator expected at sec092306.pl line 1, near "//layer1"
(Missing operator before layer1?)
syntax error at sec092306.pl line 1, near "http:"
Execution of sec092306.pl aborted due to compilation errors.


Any ideas?


hi

first lines from this patch are:

#!/usr/bin/perl

print "cPanel Security Patch (sec092306) v2\n";


you guys seemed to had copied the url together in the script?

by the way you may see that another patch sec092406 was released some minutes ago...

i dont know if you need to apply this formmer or if the later is enought?

regards

Claudio

[merlinpa1969]

Ok now Im lost,
what am I suppoosed to be doing,
the person I pay to do this is not here right now

am I supposed to run the updater again?

[felit0]

I got it to work now, initially I was using the one ending in "...306.pl" from earlier in this thread. I wget the one ending in "...406.pl" and it worked.

[cpanelnick]

Nick, why not just alter the existing ones with the 092306 date to reflect the correct changes as well.

Most people will prob just use the same name they've previously used, hence the errors and confusion already.

Wanted people to know that it was a very different patch. Anyways....updated the 092306 to be a perl script telling you to use the other one.

[randomuser]

How about a friggin sticky across all forums with the latest and greatest patch/security check?
This thread is outta control.

[.:RAIS:.]

Nick, why not just alter the existing ones with the 092306 date to reflect the correct changes as well.

Most people will prob just use the same name they've previously used, hence the errors and confusion already.

[merlinpa1969]

Is this what I do in the WHM control panel,
hit the update link at the top of the page?

[.:RAIS:.]

Yes you need to run the updater and checker again.

BE SURE to use the links Nick posted ( previous page ) or the links I posted above.