Hammered with SSO Hacks

General Discussion of atomic repo and development projects.

Ask for help here with anything else not covered by other forums.
KrazyBob
Forum Regular
Forum Regular
Posts: 310
Joined: Mon Mar 19, 2007 3:47 pm

Hammered with SSO Hacks

Unread post by KrazyBob »

I don't know if I missed a security bulletin but I am getting hammered by hacks that upload to /tmp and then execute something that loads:

sso_main.phpapi.socket-0
sso_main.phpapi.socket-1
sso_main.phprelay.socket-0
sso_main.phprelay.socket-1

and then executes:

sw-engine-cg

How/can I turn off CGI server-wide?

What is the ultimate fix? These are Plesk 9 and 10 servers.
Post Reply