Awstats users - a major hack is going on right now!! - GoFuckYourself.com

austinth · 06-01-2005, 01:31 PM

this may have been posted before but anyone who is using awstats should contact your host to make sure your server has not been hacked. The hackers are getting through with one of the .pl files and gain controll over your servers and turn them into mailers. BE WARNED!!

wdsguy · 06-01-2005, 01:33 PM

bump for ya

emthree · 06-01-2005, 01:35 PM

hah haxx

kernelpanic · 06-01-2005, 01:37 PM

Does anyone have a link to the details of the vulnerability, and when it was discovered?

pussyluver · 06-01-2005, 01:37 PM

Quote:

Originally Posted by austinth

this may have been posted before but anyone who is using awstats should contact your host to make sure your server has not been hacked. The hackers are getting through with one of the .pl files and gain controll over your servers and turn them into mailers. BE WARNED!!

details please

fireorange · 06-01-2005, 01:37 PM

Post the exploit here for me

pr0 · 06-01-2005, 01:38 PM

haw hawww

PenisFace · 06-01-2005, 01:39 PM

Trax · 06-01-2005, 01:40 PM

my hosts better know this already cuz I'm not going to contact them
that's what I pay them for

WiredGuy · 06-01-2005, 01:40 PM

Good thing I don't use AWSTats.
WG

austinth · 06-01-2005, 01:50 PM

no kidding. i just removed it from a all my sites that I was using it on. Back to webalizer for me.

austinth · 06-01-2005, 01:51 PM

http://www.blogherald.com/2005/02/03...t-downs-blogs/

austinth · 06-01-2005, 01:54 PM

apparently it's been cracked for a while now. the problem is the 'kiddie-script' users must have gotten wind of this. Fuckers!

SmokeyTheBear · 06-01-2005, 01:55 PM

if you have version 6.3+ your safe

V_RocKs · 06-01-2005, 04:24 PM

Hahaahhaa... Dude this has been posted here for a year or more now.

Google for 'awstats exploit' without the ticks.

There are 5 easy to use hacks for awstats and growing.

V_RocKs · 06-01-2005, 04:28 PM

http://64.233.187.104/search?q=cache...xploit&hl= en
http://www.frsirt.com/exploits/20050124.awexpl.c.php
http://www.frsirt.com/exploits/20050...ts_shell.c.php
http://www.frsirt.com/exploits/20050...leAWSxpl.c.php
http://www.frsirt.com/exploits/20050124.awexpl.c.php

Now you can be l33t like Jucy D. Links too!

austinth · 06-01-2005, 04:48 PM

lol! ........

06-01-2005, 01:31 PM	#1
austinth Confirmed User Join Date: Jul 2002 Location: Fantasy Island Posts: 1,770	Awstats users - a major hack is going on right now!! this may have been posted before but anyone who is using awstats should contact your host to make sure your server has not been hacked. The hackers are getting through with one of the .pl files and gain controll over your servers and turn them into mailers. BE WARNED!! __________________ Get A $25 Circuit City GIFT Card - *FREE*!

06-01-2005, 01:35 PM	#3
emthree Dialer Kingpin Join Date: Jun 2003 Location: New York Posts: 10,816	hah haxx __________________ • Sell Patches & Pills •

06-01-2005, 01:37 PM	#4
kernelpanic Too lazy to set a custom title Join Date: Jan 2005 Posts: 2,961	Does anyone have a link to the details of the vulnerability, and when it was discovered? __________________ ZangoCash - Turn Your Traffic Into Ca$h. $.40 Per Install - No Tier

06-01-2005, 01:38 PM	#7
pr0 rockin tha trailerpark Industry Role: Join Date: May 2001 Location: ~Coastal~ Posts: 23,088	haw hawww __________________ __________ Loadedca$h - get sum! - Revengebucks - mmm rebills! - webair (gotz sErVrz)

06-01-2005, 01:39 PM	#8
PenisFace Confirmed User Industry Role: Join Date: Oct 2003 Location: Vancouver Posts: 3,774	__________________ Need custom blog posts or articles? Hit me up: Blog And Article Writer Yes, I can do any kind of custom orders, too! ICQ: 641204000

06-01-2005, 01:33 PM	#2
wdsguy Ryde or Die Industry Role: Join Date: Dec 2002 Location: California-Shanghai Posts: 19,568	bump for ya

06-01-2005, 01:37 PM	#6
fireorange Confirmed User Join Date: Jan 2005 Posts: 1,648	Post the exploit here for me

06-01-2005, 01:40 PM	#9
Trax [----------------------] Join Date: Aug 2001 Posts: 14,486	my hosts better know this already cuz I'm not going to contact them that's what I pay them for

06-01-2005, 01:40 PM	#10
WiredGuy Pounding Googlebot Industry Role: Join Date: Aug 2002 Location: Canada Posts: 34,482	Good thing I don't use AWSTats. WG __________________ I play with Google.

06-01-2005, 01:50 PM	#11
austinth Confirmed User Join Date: Jul 2002 Location: Fantasy Island Posts: 1,770	no kidding. i just removed it from a all my sites that I was using it on. Back to webalizer for me. __________________ Get A $25 Circuit City GIFT Card - *FREE*!

06-01-2005, 01:51 PM	#12
austinth Confirmed User Join Date: Jul 2002 Location: Fantasy Island Posts: 1,770	http://www.blogherald.com/2005/02/03...t-downs-blogs/ __________________ Get A $25 Circuit City GIFT Card - *FREE*!

06-01-2005, 01:54 PM	#13
austinth Confirmed User Join Date: Jul 2002 Location: Fantasy Island Posts: 1,770	apparently it's been cracked for a while now. the problem is the 'kiddie-script' users must have gotten wind of this. Fuckers! __________________ Get A $25 Circuit City GIFT Card - *FREE*!

06-01-2005, 01:55 PM	#14
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	if you have version 6.3+ your safe __________________ hatisblack at yahoo.com

06-01-2005, 04:24 PM	#15
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,409	Hahaahhaa... Dude this has been posted here for a year or more now. Google for 'awstats exploit' without the ticks. There are 5 easy to use hacks for awstats and growing.

06-01-2005, 04:28 PM	#16
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,409	http://64.233.187.104/search?q=cache...xploit&hl= en http://www.frsirt.com/exploits/20050124.awexpl.c.php http://www.frsirt.com/exploits/20050...ts_shell.c.php http://www.frsirt.com/exploits/20050...leAWSxpl.c.php http://www.frsirt.com/exploits/20050124.awexpl.c.php Now you can be l33t like Jucy D. Links too!

06-01-2005, 04:48 PM	#17
austinth Confirmed User Join Date: Jul 2002 Location: Fantasy Island Posts: 1,770	lol! ........ __________________ Get A $25 Circuit City GIFT Card - *FREE*!