MRatWork Forum by Mustafa Ramadhan - *Kloxo Exploit*

Sponsor:
Server and Web Integrator
Link:
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:

MRatWork Forum | Please login or register. | 2017-11-07, 19:34:39

- MRatWork Forum by Mustafa Ramadhan »
- Language Specific Discussions »
- Indonesia Users »
- *Kloxo Exploit*

« previous next »

- Print

Pages: [1] Go Down

### Author Topic: *Kloxo Exploit* (Read 2243 times)

0 Members and 1 Guest are viewing this topic.

#### bugis

- Valuable Member
- Posts: 113
- Karma: +0/-0

##### *Kloxo Exploit*

« on: 2014-01-29, 01:38:21 »
Halo master.....
Saya baca di beberapa forum sebelah : Kloxo exploit that allows an attacker to gain full root access
Sumber:
http://www.webhostingtalk.com/showthread.php?p=8996942
https://vpsboard.com/topic/3384-kloxo-installations-compromised/
apakah ini juga berdampak pada Kloxo-MR ?
Mohon penjelasannya...
Terima kasih
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: *Kloxo Exploit*

« Reply #1 on: 2014-01-29, 04:03:25 »
Sejauh exploit yang disebut, semua sudah di-fix di Kloxo-MR.
Salahsatu alasan lahirnya Kloxo-MR adalah adanya exploit di Kloxo 6.1.12 yang tidak di-fix sampai sekarang pun.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### ebokalsel

- Junior Member
- Posts: 41
- Karma: +1/-0

##### Re: *Kloxo Exploit*

« Reply #2 on: 2014-01-29, 08:09:26 »
Yes, saya dapet email juga:
Greetings,
Since this morning, we have been combating multiple DDoS attacks across all of our locations. Upon further investigation, this is stemming from compromised VPS containers that utilize the Kloxo control panel software.
We have been made aware of an active zero day exploit in Kloxo with no workaround available. Essentially the exploit spawns a large number of httpd processes that allows the affected system to participate in a DDoS.
We kindly request your immediate attention into this matter, and ask that if you are running Kloxo that you disable it immediately.
Due to the fact that Kloxo developers are inactive and appears to be poorly written, along with the severity of this zero day exploit, we are prohibiting Kloxo to be ran on our VPS servers moving forward in order to protect our network and our users. We believe this is the best resolution, as Kloxo is not a secure software that should be used in any production environment. If your VPS is currently running Kloxo, please wipe your Kloxo install immediately. If you still require a control panel, below is a list of alternative free control panels that you can consider installing:
VestaCP
Webmin/Virtualmin
iMSCP
Ajenti
OpenPanel
ISPConfig
For more information regarding this Kloxo exploit please follow this discussion on WHT:
http://www.webhostingtalk.com/showthread.php?p=8996984
If you are not running Kloxo on your server, you may disregard this email. Your prompt attention and cooperation in this matter is appreciated.
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: *Kloxo Exploit*

« Reply #3 on: 2014-01-29, 08:27:25 »
Coba saja diakali agar port KLoxo-MR diubah dari 7777/7778 ke (misalnya) 8777/8778 (atau yang lain).
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### ebokalsel

- Junior Member
- Posts: 41
- Karma: +1/-0

##### Re: *Kloxo Exploit*

« Reply #4 on: 2014-01-29, 09:05:45 »
Siap, laksanakan 86!..
Setelah membalas ticket dari provider vps yang katanya akan prohibit any running Kloxo panel (saya tanya: bagaimana dengan Kloxo-MR?). Saya dapat jawaban:
Hi,
Yeah Kloxo-MR is fine.
Regards,
--
Ulrich Ackermann
WeLoveServers.net Technician
« Last Edit: 2014-01-29, 09:07:58 by ebokalsel »
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: *Kloxo Exploit*

« Reply #5 on: 2014-01-29, 09:09:22 »
Quote from: ebokalsel on 2014-01-29, 09:05:45

> Siap, laksanakan 86!..
> Setelah membalas ticket dari provider vps yang katanya akan prohibit any running Kloxo panel (saya tanya: bagaimana dengan Kloxo-MR?). Saya dapat jawaban:
> Hi,
> Yeah Kloxo-MR is fine.
> Regards,
> --
> Ulrich Ackermann
> WeLoveServers.net Technician

Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### Hajie

- Junior Member
- Posts: 26
- Karma: +0/-0
- Gender:

##### Re: *Kloxo Exploit*

« Reply #6 on: 2014-01-29, 10:24:14 »
Kloxo-MR memang mantap
Logged

#### bugis

- Valuable Member
- Posts: 113
- Karma: +0/-0

##### Re: *Kloxo Exploit*

« Reply #7 on: 2014-01-29, 13:25:10 »
syukurlah.....
terima kasih penjelasannya.
bravo kloxoMR
Logged

#### komvis

- Junior Member
- Posts: 35
- Karma: +0/-0

##### Re: *Kloxo Exploit*

« Reply #8 on: 2014-01-29, 23:56:24 »
wah om ebokalsel pake weloveservers juga yah...sesama pengguna nih..hehehe, alhamdulillah kloxo-mr aman....mantap
« Last Edit: 2014-01-30, 01:19:18 by komvis »
Logged

- Print

Pages: [1] Go Up
« previous next »

- MRatWork Forum by Mustafa Ramadhan »
- Language Specific Discussions »
- Indonesia Users »
- *Kloxo Exploit*

MRatWork Affiliates: BIGRAF(R) Inc. House of LMAR EFARgrafix

..:: Monetize Your Website with ylliXmedia ::.. ..:: Online Advertising that Sale Anything with ylliXmedia ::..

- Design By SMFSimple.com
- SMF 2.0.14 | SMF © 2017, Simple Machines

Page created in 0.041 seconds with 17 queries.

Mirror created by MasterkinG32.CoM