Search results

  1. A

    cPanel exploited!

    We figured out what happened........... We discovered it happened after restoring a backup for a customer. All of the home directories actually ended up in the users that we were restoring. we are 100% sure this was not error on our part as we reviewed the entire command history. The sql...
  2. A

    cPanel exploited!

    Sl1k what version of cpanel it this happening to you on? Also please read everything I wrote and answer. thanks!
  3. A

    cPanel exploited!

    We can eliminate this since user databases also are deleted which can't be done from ftp.
  4. A

    cPanel exploited!

    I think were all better off working togeather and determining what the victims have in common. So far we have two servers. Cpanel isn't sure, and if it was in the logs I wouldn't be here.
  5. A

    cPanel exploited!

    We very much know what we are doing. We manage over 1,000 servers. The affected box had grsecurity, latest kernal, phpsuex, latest apache, frontpage, all of it.... The box was not rooted since only cpanel users folders were affected and we see no signs to point otherwise. Not all accounts were...
  6. A

    cPanel exploited!

    What version of cpanel were you running? We believe 10.8.0 stable has holes.
  7. A

    cPanel exploited!

    We had the same thing happen on one of our boxes about same time you posted this today. There's nothing in the logs...... If it was a cpanel exploit I'd think more of our boxes would be affected. What other details can you provide on this? You said it happens every month? Is this...
  8. A

    Warning: those who had upgrade to WHM 10.6.0 cPanel 10.6.0-R55 . Please check.

    We did cpanel updates on about 100 boxes 5 of the boxes had the same issue, right after the update. today one of the 5 had the root password changed on the box. no signs of root kits or anything.if anyone has any helpful information, please let us know.
  9. A

    resellers creating accounts with same username and password

    got my fix already!! Nick / Billy do an amazing job! " This script (when run as root) will change the password of all users with a password equal to their username to a random 10 char password, and display the change. http://koston.org/lockbaduserspass Install/Use Instructions...
  10. A

    resellers creating accounts with same username and password

    We have over 7000 resellers and many of them are creating accounts with same username and password. on a daily basis we're having to deal with half a dozen "hacked" accounts from username / pw being the same. Almost every one of these begin spamming or trying to hack the server. This...
  11. A

    aspell crashing my box.

    sneader what os is your server? we are all RH 9
  12. A

    aspell crashing my box.

    We are running into this problem daily on multiple servers. Every time we come across it we disable aspell for that server. To disable it you can do chmod 0 /usr/bin/aspell Does anyone have a workaround that does not require it being disabled? And does anyone have an idea why this...
  13. A

    Cant Upload - WHM 9.1.0 cPanel 9.1.0-S93

    Since posting in here we have talked with 4 other hosts having this problem all in SM. SO please open up a ticket with them and direct them to this thread.
  14. A

    Cant Upload - WHM 9.1.0 cPanel 9.1.0-S93

    Are your servers in servermatrix / theplanet? Weve had many users say the same thing today all of which are in that datacenter, and on servers that were randomly going down a day ago from their router issues. So it seems they are blocking that type of traffic at those routers.
  15. A

    HELP: Accounts in /home and in "Modify Accounts" but not listing in "List Accounts&am

    again Just happened on another reseller box entire config was eaten this time. Cpanel this problem ONLY affects resellers so please trace it and fix it. Every reseller host I know has had this problem multiple times if they have a lot of reseller boxes.
  16. A

    HELP: Accounts in /home and in "Modify Accounts" but not listing in "List Accounts&am

    possible? This happened on yet another server 2 days ago this time we somewhat know the cause from it. The server it happened on had about 800 accounts after a big chunk of the config was eaten it was left with 603 accounts. How It happened... I was logged into A resellers WHM using the...
  17. A

    HELP: Accounts in /home and in "Modify Accounts" but not listing in "List Accounts&am

    [email protected][email protected]#[email protected] Cpanel get to work on this please. This has happened on another reseller server just now. This is the 4t reseller box of ours it has happened to. 300+ entrys deleted out of the 600. Is anyone working on this issue? Hello?
  18. A

    HELP: Accounts in /home and in "Modify Accounts" but not listing in "List Accounts&am

    again Well this just happened again on another server. We guestimate 200 entrys deleted from the httpdconfig Anything cpanel?
  19. A

    HELP: Accounts in /home and in "Modify Accounts" but not listing in "List Accounts&am

    bug I think I figured out the cause of this happening. NEVER allow a reseller to change his username on the main reseller account. If the bug strikes not only will his account get screwed up but many entrys out of the httpd.conf will dissapear. This is the email from our reseller client...
  20. A

    HELP: Accounts in /home and in "Modify Accounts" but not listing in "List Accounts&am

    We had this problem a month ago on a server it caused a week + of headache while we waiting for clients to come to us saying their site was missing. We just now had it on another server. UPCP did not work, and this is turning into an epidemic. Does anyone know of a working fix? cPanel.net...