New vulnerability? (plesk 9.5.4)

[fibercom]

Me too

Same thing to me . I had to change my plesk server toward 10.4.
I don't still find the way they hack the panel plesk account.
Take care, i just delete all infected files (.pl .cgi, disable perl and cgi, it has bee hacked one more time after a week...

 

[Bruno1700]

Yes me too

Hello ;

I got the same thing , things i dont understand :

- Why PLESK create a file with (0 bytes ) with system user ( for suspended domains ) in /var/spool/cron ????

- Users have no privilege to create cron jobs, how can hackers create files with users names in /var/spool/cron ?

Thanks