

Cpanel, Hosting İle İlgilenenler ! (Açık)
-
Bir web hosting management sistemi olan CPANEL de yeni bir acik bulundu. Eger hosting sirketi Apache <= 1.3.29 ustune CPANEL kurmus ve mod_phpsuexec modulunu php.ini de aciksa, asagidaki php kodu sayesinde shelle dusuluyor ve o hosting sirketine kayitli domainlere erisim saglanabiliyor, yani silinebiliyor, *.inc *.php *.cgi dosyalari okunabiliyor, echo hacked>www/xxx/index.html de yapilabiliyor tabiki :) ufacik bir kod ile bir hosting sirketinin tum domainleri hacklenebilir, herneyse konumuz bu degil :p Cozum icin Apache'nin 1.3.31 ve ustu bir surumu yuklenmesi gerekiyor.
http://64.240.171.106/cpanel.php
Daha ayrıntılı:
Free cPanel Security Check
Some versions or configurations of cPanel have been known to have some security vulnerabilities. If you are using cPanel software, you need to make sure your system is safe. This free utility will test a few of the more common issues using some simple non-intrusive checks. It is intended to be run as an unprivileged user. Do NOT run this test as root! If you need a more detailed vulnerability scan report, you'll need to purchase the full remote security assessment. If you have any questions or comments, just email Paul de Souza pdesouza@asquad.com.
Performing the security audit
To run the audit, upload cpanel.php to your site. It can be saved into any subfolder but should be called "cpanel.php". Visiting it from your site will render the report to your browser. If you do not understand how to copy this php file to your server, then you probably shouldn't be using this utility.
Alintidir:http://www.a-squad.com/audit/
-
Alintidir:http://www.a-squad.com/audit/ buradan deil mdkdan alinti bu zira o haberi o sekilde yazan ceviren yada herneyse vonadir...
Kolay gelsin
-
Sorun yok, mdk iyi yerdir.Ama asil yer " http://www.a-squad.com/audit/ " burasidir...