CPanel Trojan

Wojjie · (#1 (**permalink**))

Hi
Just wondering how many people heard about the trojan that utilizes the new CPanel exploit (which has been fixed now), also how many people have got hit?

Coffeee · (#2 (**permalink**))

Never even knew there was on hanging around :S

ramprage · (#3 (**permalink**))

Wojjie, yes I was hit.
http://www.webhostgear.com/72.html

I was infected with a t0rn rootkit from that security hole.

Kerry Jones · (#4 (**permalink**))

Its always good to know a few Black & White hats. I took me a while for them to show me this exploit.

http://securityfocus.com/archive/1/3...0/2004-03-16/0

The Cpanel Trojan should be the least of your problems.

Wojjie · (#5 (**permalink**))

The people with RedHat servers have the worst luck. Currently, RHN is down till Sunday 8pm, and depending on how your datacenter reimages your servers, you may need it to be up.

Some datacenters will reimage the OS and reinstall CPanel, at which it will try to install apache and eximstats off the RHN.

Really bad timing on Red Hats part.

Calvin · (#6 (**permalink**))

No, it seems I was one of the more fortunate ones. I have not been hit.

nsusa · (#7 (**permalink**))

The host I am with updated the servers as soon as the exploit was know. Never had any problems in regards to security.

Chris

ToOnZ · (#8 (**permalink**))

The thing is that at the rate cpanel are generating problems for us, it'll be soon where we'll have to leave it :(