Chinyorwa Directory
VestaCP control panel ine dambudziko rekurwiswa kwekusagadzikana kwemazuva 0:
- Mishumo yazvino inoratidza kusagadzikana muVESTA API inobvumira kodhi kuti iitwe seROOT.
- Mhepo yekutanga inonzi yakaitika muna Kubvumbi 2018, 4.
- Sevha ine hutachiona yakawanikwa, inoshanda muna Kubvumbi 2018, 4
/usr/lib/libudev.soTanga iyo DDoS iri kure host.
Kubva pane zvakaonekwa kusvika zvino, kana sevha yatapukirwa, inoshandiswa kutumira DDoS kurwisa.

Kuona Vulnerabilities
Nzira yekuona sei kana uine utachiona neVestaCP 0-day Trojan?
- Tevedza matanho ari pasi apa kuti uone kana server yako ine hutachiona?
Danho 1: Pinda muserver yako semudzi.
danho 2:mu /etc/cron.hourly Tarisa faira rakanzi "gcc.sh" mufolda ▼
cd /etc/cron.hourly ls -al
- Kana iyo faira iripo, server yako ine hutachiona.
- Kana uine hutachiona, chengetedza mafaera ako uye dhatabhesi nekukurumidza, dzorera yakoLinuxserver.
- Chinja password yedatabase uye server ROOT password.
Gadziridza / Simudzira VestaCP Panel Mirairo
- Kana pasina "gcc.sh" faira, zvinoreva kuti haina kutapukirwa neTrojan.
- Kana iwe usina kutapukirwa, ndapota simudza (gadzirisa) kusagadzikana kweVestaCP panel nekukurumidza.
Danho 1: Mhanya murairo unotevera kuti utarise nhamba yevhezheni yepaneru yeVestaCP ▼
v-list-sys-vesta-updates
Danho rechipiri: Mhanya murairo unotevera kuti ugadzirise panel yeVestaCP ▼
v-update-sys-vesta-all
Danho rechitatu: Tangazve VestaCP ▼
service vesta restart
Danho rechina: Tangazve sevha ▼
reboot
Heano mamwe matutorials paVestaCP mapaneru ▼
Tinovimba kuti chinyorwa chinoti "Nzira yekuona VestaCP 0-day Vulnerability? Gadzirisa/Upgrade & Update Commands" chakagoverwa pablog raChen Weiliang ( https://www.chenweiliang.com/ ) chichakubatsira.
Sunungukai kugovera link yechinyorwa chino: https://www.chenweiliang.com/cwl-742.html


