A critical vulnerability (CVE-2019-10149) was found in Exim mail server. It allows to execute some code on victim's server with root privileges. This vulnerability affects versions from 4.87 to 4.91. If you are using Exim and haven't ordered managed service, you should urgently upgrade your version of Exim to 4.92.
Search found 1 match
Search found 1 match • Page 1 of 1
- Sun Apr 08, 2018 4:17 pm
- Forum: General Discussion
- Topic: Got 10 VestaCP servers exploited
- Replies: 548
- Views: 77940
Experienced the same hack on my VestaCP server (CentOS 7.x) earlier today, came across this thread only now. Deleting the malicious script only caused gcc.sh to reinstall it. Followed the steps outlined here: https://superuser.com/a/1004724 to change /lib/ folder permissions, secure cron permissions...