Server Buddies
Server Buddies info@serverbuddies.com Server Management Offline Live Support English
Eng
Server Management
Spanish
Spa
     
Providing Dedicated Server Solutions Just a Click AWAY
Home
Services
Order
Support
News
Contact Us
About Us
server management
Empty
Cpanel Support
Plesk Support
Ensim Support
Webmin Support
Directadmin Support
Empty
We Accept
We accept Visa, Mastercard, Discover and American Express credit cards.
Paypal is also accepted. The email address to use to make PayPal payment to us is:
order@serverbuddies.com
Paypal Accepted Paypal Accepted
2Checkout



Empty
Testimonials
Our database server was corrupting tables every hour and I had multiple other admins look into the issue but only serverbuddies technicians were have to resolve it. They worked arround the clock until it was fixed.
MDofPC LLC.
See more reviews
Empty
News

cPanel WHM Security Advisory

03-09-2013
cPanel & WHM Security Advisory

2013-02-26 cPanel & WHM Security Advisory for 11.32, 11.34, and 11.36

Description


Cross-site scripting attack in countedit.cgi

cPanel & WHM provide an API 2 call that allows branding code to include files that are on the system. This function can also be called remotely. The function did not check that the files requested were within the appropriate document root, so arbitrary files could be read. Additionally, there was the possibility to leverage this with another, third-party vulnerability to execute arbitrary code.

Solution

This issue is resolved in the following builds:

11.36.0.10 and greater
11.34.1.11 and greater
11.32.6.2 and greater

Please update your cPanel & WHM system to one of the aforementioned versions or the latest public release available.

Reference: http://cpanel.net/2013-02-26-cpanel-whm-security-advisory-for-11-32-11-34-and-11-36/
Remember, we listen to you! Any comments/suggestions should be sent to info@serverbuddies.com.

 
RedHat Support Debian Support Gentoo Linux Support FreeBSD Linux Fedora Support Ubuntu Support CentOS Support SuSe Support
Home | Services | Order | Support | News | About Us | Contact | Site Map | Refund & Privacy Policy | Blog