Cpanel security bug ?

[khoonchee]

Hello,

Our server today has been hacked by one brazillian.He is using the tool from



Damm the hacker have replaced all the index and home files on the server.It took us half day time to restore all the files back

 

[@home]

You are beeing smart posting that link for people that did not knew where to get that one .

Remove that link

 

[khoonchee]

I have remove the link .

I was just hoping that the cpanel will release an update to fix the problem ...

 

[@home]

I understand.

I hope they wil do that too.

But we don't want to wake up sleeping dogs :D

Sorry you got hacked

 

[Curious Too]

Originally posted by khoonchee
I have remove the link .

I was just hoping that the cpanel will release an update to fix the problem ...

Have you confirmed it to be a cPanel problem?

 

[Arvand]

might want to e-mail cpanel about it...

 

[jamesbond]

I downloaded that cpanel remote exploit program you mentioned, it's 6 months old.

How do you know for sure they got in using that program?
I didn't try to connect to my server with it, but I really doubt that this software was developed for a new exploit as it is 6 months old already.

It seems more like a general cpanel port scanner and execute command tool. Maybe they got in through another hole (not a specific CPanel hole) and just used this software to execute commands?

CPanel 5 did have a remote exploit bug, but that's a while ago.