Need help with chkrootkit output

[Tina]

My server is:

WHM 10.8.0 cPanel 10.8.1-R21
CentOS 3.1 i686 - WHM X v3.1.0

I ran rkhunter and got the following output. fter checking the forum I am pretty sure that I don't have to worry about this, but of course if someone sees something suspicious please let me know.

* Application scan
   Checking Apache2 modules ...                               [ Not found ]
   Checking Apache configuration ...                          [ OK ]

* Application version scan
   - Exim MTA 4.52                                            [ Unknown ]
   - GnuPG 1.2.1                                              [ Old or patched version ]
   - Apache [unknown]                                         [ OK ]
   - Bind DNS 9.2.2                                           [ Unknown ]
   - OpenSSL 0.9.7a                                           [ Old or patched version ]
   - PHP 4.3.9                                                [ Old or patched version ]
   - PHP 4.3.9                                                [ Old or patched version ]
   - Procmail MTA 3.22                                        [ OK ]
   - OpenSSH 3.6.1p2                                          [ Old or patched version ]

What I would like to know, is it better to manually update these applications or wait for the next stable release? Does patched mean that they are updated already?

Thank you!
Tina

[jackie46]

Just dont touch them. You are fine the way you are. As for php, well hopefully you are not running php 4.3.9 or you could be looking at some serious security issues. What does php -v say?

[Tina]

This is my php -v


PHP 4.3.9 (cli) (built: Nov 5 2004 15:43:42)
Copyright (c) 1997-2004 The PHP Group
Zend Engine v1.3.0, Copyright (c) 1998-2004 Zend Technologies

And I do believe that I am experiencing something, just trying to figure out what it is...

[jackie46]

This is my php -v


PHP 4.3.9 (cli) (built: Nov 5 2004 15:43:42)
Copyright (c) 1997-2004 The PHP Group
Zend Engine v1.3.0, Copyright (c) 1998-2004 Zend Technologies

And I do believe that I am experiencing something, just trying to figure out what it is...

You better upgrade php Tina. At least to 4.3.11. You could go to 4.4.1 but i hear there are issues so you'd be better of upgrading as far as 4.3.11.

[chirpy]

I'm not aware of any issues with v4.4.1 of php that should stop you upgrading to it.php v4.3.11 is vulnerable to some very serious exploits and you should not be running it, that is bad advice.

You should also upgrade CentOS. You're currently running v3.1 whereas the latest version is v3.6

[Tina]

Thank you. I did upgrade to 4.4.1. I will now see about upgrading cent os.

I really appreciate all the help I have been receiving.

T.