1. Please take a little time for this simple survey! Thank you for participating!
    Dismiss Notice
  2. Dear Pleskians, please read this carefully! New attachments and other rules Thank you!
    Dismiss Notice
  3. Dear Pleskians, I really hope that you will share your opinion in this Special topic for chatter about Plesk in the Clouds. Thank you!
    Dismiss Notice

Hacking using HORDE!

Discussion in 'Plesk 9.x for Linux Suggestions and Feedback' started by NizzyG, Feb 21, 2010.

  1. NizzyG

    NizzyG Guest

    0
     
    My hosting company just notified that my server was used for hacking other servers. It was a denial of service attack. I was asked to look into logs and investigate it.

    I found out that Horde is the one used for that. if you enabled the Horde as I did and never secured the directory, etc, your server is under watch by hackers as well. Here is the link of that application can be called from.

    Basically, horde allows users to run any shell commands. Horde has php shell, sql shell as well as CLI. How nice it is! go figure it out the rest by yourself.

    http://www.SITE.com/horde/admin/cmdshell.php

    I strongly recommend Plesk to remove the horde from their recommended list of applications.
     
  2. IgorG

    IgorG Forums Analyst Staff Member

    49
    24%
    Joined:
    Oct 27, 2009
    Messages:
    24,557
    Likes Received:
    1,241
    Location:
    Novosibirsk, Russia
    Thank you for notification. I have forwarded it to developers. I will update this thread with any useful information as soon as I receive it.
     
  3. m0rpheu5

    m0rpheu5 Regular Pleskian

    27
     
    Joined:
    Jul 1, 2008
    Messages:
    120
    Likes Received:
    0
    any news about that?
     
  4. IgorG

    IgorG Forums Analyst Staff Member

    49
    24%
    Joined:
    Oct 27, 2009
    Messages:
    24,557
    Likes Received:
    1,241
    Location:
    Novosibirsk, Russia
    Still under developer's investigation. They are prepare 9.5 release now, therefore not sure that investigation will be fast.
     
  5. IgorG

    IgorG Forums Analyst Staff Member

    49
    24%
    Joined:
    Oct 27, 2009
    Messages:
    24,557
    Likes Received:
    1,241
    Location:
    Novosibirsk, Russia
    Could you please, specify OS, Plesk version and steps to reproduce the issue.
     
Loading...