HostOnNet.com

Annie · Site Admin Joined: 19 Jun 2005 Posts: 23

A new 'backdoor' was found in cPanel that would allow malicious users to reboot your server, delete files, and gain unauthorized access. Basically you NEED to fix this or risk getting 'hacked/attacked'. The security issue resides with cPanels new 'request a password' feature for accounts. You can disable this feature as detailed below, and also fix the file that allows the malicious code to be executed.

Step1

1 Login to WHM as root

2 Click "Tweak Settings"

3 Scroll down to the bottom and UNCHECK

Allow cPanel users to reset their password via email

4 Click Save

Step 2

5 Login to your server via SSH as root.

6 Type: chmod 600 /usr/local/cpanel/base/resetpass.cgi

7 Type: chattr +i /usr/local/cpanel/base/resetpass.cgi