Server Buddies
Server Buddies info@serverbuddies.com Server Management LiveZilla Live Help
English
Eng
Server Management Spanish
Spa
Providing Dedicated Server Solutions Just a Click AWAY
Home
Services
Order
Support
News
Contact Us
About Us
server management Server Tweaking Server Monitoring HelpDesk Support Security Audit
Empty
Cpanel Support
Plesk Support
Ensim Support
Webmin Support
Directadmin Support
Empty
We Accept
We accept Visa, Mastercard, Discover and American Express credit cards.
Paypal is also accepted. The email address to use to make PayPal payment to us is:
order@serverbuddies.com
Paypal Accepted Paypal Accepted
2Checkout Accepted
30-Day MoneyBack Guarantee!


Empty
Testimonials
We had some slow loading issues and they were able to show me that it was code related and give me suggestions on where to look. This wasnt a server issue but they helped anyway.
ShopOnTheWeb.
See more reviews
Empty
News

cPanel WHM Security Advisory

03-09-2013
cPanel & WHM Security Advisory

2013-02-26 cPanel & WHM Security Advisory for 11.32, 11.34, and 11.36

Description


Cross-site scripting attack in countedit.cgi

cPanel & WHM provide an API 2 call that allows branding code to include files that are on the system. This function can also be called remotely. The function did not check that the files requested were within the appropriate document root, so arbitrary files could be read. Additionally, there was the possibility to leverage this with another, third-party vulnerability to execute arbitrary code.

Solution

This issue is resolved in the following builds:

11.36.0.10 and greater
11.34.1.11 and greater
11.32.6.2 and greater

Please update your cPanel & WHM system to one of the aforementioned versions or the latest public release available.

Reference: http://cpanel.net/2013-02-26-cpanel-whm-security-advisory-for-11-32-11-34-and-11-36/
Remember, we listen to you! Any comments/suggestions should be sent to info@serverbuddies.com.

 
RedHat Support Debian Support Gentoo Linux Support FreeBSD Support Fedora Support Ubuntu Support CentOS Support SuSe Support
Home | Services | Order | Support | News | About Us | Contact | Site Map | Refund & Privacy Policy | Blog