28 Mar 2006

H-Sphere versions:   2.4.3 and 2.5

All H-Sphere owners are highly recommended to apply this CP security update in addition to security measures as of Mar 25.

This patch provides a temporary solution for possible vulnerabilities in H-Sphere templates to close all vectors of attacks against cpanel user.

1. Log into your control panel server as root:
   
   su -
2. Download the security update from the psoft site:
   Linux:
   
   wget http://www.psoft.net/shiv/HS/cp_security_hotfix_060328.tgz
   FreeBSD:
   
   fetch http://www.psoft.net/shiv/HS/cp_security_hotfix_060328.tgz
3. Unpack the archive:
tar zxf cp_security_hotfix_060328.tgz
4. Run the script:
./cp_security_hotfix_060328.pl